Security: SSH Client
Overview
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
492
23
If there are multiple switches in the network, the process of creating public/private
keys for all the switches might be time-consuming, because each public/private
key must be created and then loaded onto the SSH server.
To facilitate this process, an additional feature enables secure transfer of the
encrypted private key to all switches in the system.
When a private key is created on a device, it is also possible to create an
associated
passphrase
. This passphrase is used to encrypt the private key and to
import it into the remaining switches. In this way, all the switches can use the same
public/private key.
Default Password
SSH user authentication by password is enabled by default, with the username/
password being “anonymous”.
The user must configure the following information for authentication:
•
The authentication method to be used.
•
The username/password or public/private key pair.
Supported Algorithms
When the connection between a device (as an SSH client) and an SSH server is
established, the client and SSH server exchange data in order to determine the
algorithms to use in the SSH transport layer.
The following algorithms are supported on the client side:
•
Key Exchange Algorithm-diffie-hellman
•
Encryption Algorithms
-
aes128-cbc
-
3des-cbc
-
arcfour
-
aes192-cbc
-
aes256-cbc
•
Message Authentication Code Algorithms
-
hmac-sha1
