Administration: File Management
DHCP Auto Configuration/Image Update
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
91
6
without any manual intervention by the system administrator. The first time that it
applies for its IP address from the DHCP server, the device downloads and
reboots itself with the configuration file and/or image specified by the DHCP
server.
The Auto Configuration process supports downloading a configuration file that
includes sensitive information, such as RADIUS server keys and SSH/SSL keys, by
using the Secured Copy Protocol (SCP) and the Secure Sensitive Data (SSD)
feature (See
and
Security: Secure Sensitive Data
Download Protocols (TFTP or SCP)
Configuration files and firmware images can be downloaded from either a TFTP or
an SCP server.
The user configures the protocol to be used, as follows:
•
Auto By File Extension—(Default) If this option is selected, a user-defined
file extension indicates that files with this extension are downloaded using
SCP (over SSH), while files with other extensions are downloaded using
TFTP. For example, if the file extension specified is
.xyz
, files with the
.xyz
extension are downloaded using SCP, and files with the other extensions
are downloaded using TFTP. The default extension is .scp.
•
TFTP Only—The download is done through TFTP, regardless of the file
extension of the configuration file name.
•
SCP Only—The download is done through SCP (over SSH), regardless of
the file extension of the configuration file name.
SSH Client Authentication
SCP is SSH based. By default, remote SSH server authentication is disabled, so
that the device accepts any remote SSH server out of the box. You can enable
remote SSH server authentication so that only servers found in the trusted server
list can be used.
SSH client authentication parameters are required to access the SSH server by
the client (which is the device). The default SSH client authentication parameters
are:
•
SSH authentication method: by username/password
•
SSH username: anonymous
