Extreme Networks ExtremeWare XOS 11.1, Руководство пользователя

Страница: 250 / 496

Security
ExtremeWare XOS 11.1 Concepts Guide
250
NOTE
The pregenerated key must be one that was generated by the switch. To get such key, you can use the command
show configuration exsshd to display the key on the console. Copy the key to a text editor and remove the carriage
return/line feeds from the key. Finally, copy and paste the key into the command line. The key must be entered as
one line.
The key generation process generates the SSH2 private host key. The SSH2 public host key is derived
from the private host key and is automatically transmitted to the SSH2 client at the beginning of an
SSH2 session.
To enable SSH2, use the following command:
enable ssh2 {port <tcp_port_number>} {vr [<vr_name> | all | default]}
You can also specify a TCP port number to be used for SSH2 communication. By default the TCP port
number is 22.
Before you initiate a session from an SSH2 client, ensure that the client is configured for any non-default
access list or TCP port information that you have configured on the switch. Once these tasks are
accomplished, you may establish an SSH2-encrypted session with the switch. Clients must have a valid
user name and password on the switch in order to log in to the switch after the SSH2 session has been
established.
To view the status of SSH2 sessions on the switch, use the
show management
command. The
show
management
command displays information about the switch including the enable/disable state for
SSH2 sessions and whether a valid key is present.
For additional information on the SSH protocol refer to Federal Information Processing Standards
Publication (FIPSPUB) 186, Digital Signature Standard, 18 May 1994. This can be download from: ftp://
ftp.cs.hut.fi/pub/ssh. General technical information is also available from:
http://www.ssh.fi
Using SCP2 from an External SSH2 Client
In ExtremeWare XOS version 11.0 or later, the SCP2 protocol is supported for transferring configuration,
and policy files to the switch from the SCP2 client.
The user must have administrator-level access to the switch. The switch can be specified by its switch
name or IP address.
ExtremeWare XOS 11.0 only allows SCP2 to transfer to the switch files named as follows:
●
*.cfg—ExtremeWare XOS configuration files
●
*.pol—ExtremeWare XOS policy files
In the following examples, you are using a Linux system to move files to and from the switch at
192.168.0.120, using the switch administrator account
admin
.You are logged into your Linux system as
user .