Hirschmann GREYHOUND GRS1020, Справочное руководство

Страница: 81 / 619

Device Security
[ Device Security > Management Access > Server ]
80
RM GUI GRS
Release 8.0 09/2019
[ SSH ]
This tab lets you enable/disable the SSH server in the device and specify its settings required for
SSH. The server works with SSH version 2.
The SSH server enables access to the device management remotely through the Command Line
Interface. SSH connections are encrypted.
The SSH server identifies itself to the clients using its public RSA key. When first setting up the
connection, the client program displays the user the fingerprint of this key. The fingerprint contains
a Base64-coded character sequence that is easy to check. When you make this character
sequence available to the users via a reliable channel, they have the option to compare both
fingerprints. If the character sequences match, then the client is connected to the correct server.
The device lets you create the private and public keys (host keys) required for RSA directly in the
device. Otherwise you have the option to copy your own keys to the device in PEM format.
As an alternative, the device lets you load the RSA key (host key) from an external memory upon
restart. You activate this function in the
Basic Settings > External Memory
dialog,
SSH key auto upload
column.
Operation
Operation
Enables/disables the SSH server.
Possible values:

On
(default setting)
The SSH server is enabled.
The access to the device management is possible through the Command Line Interface using
an encrypted SSH connection.
You can start the server only if there is an RSA signature in the device.

Off
The SSH server is disabled.
When you disable the SSH server, the existing connections remain established. However, the
device helps prevent new connections from being set up.
Note: If the Telnet server is disabled and you also disable SSH, then the access to the Command
Line Interface is only possible through the serial interface of the device.
Configuration
TCP port
Specifies the number of the TCP port on which the device receives SSH requests from clients.
Possible values:

1..65535 (default setting: 22 )
Exception: Port 2222 is reserved for internal functions.
The server restarts automatically after the port is changed. Existing connections remain in place.