HP 2520-24, Руководство по настройке

Страница: 85 / 110

3-17
IPv6 Management Security Features
Secure Copy and Secure FTP for IPv6
Displaying an SSH Configuration
To verify an SSH for IPv6 configuration and display all SSH sessions running
on the switch, enter the
show ip ssh command. Information on all current SSH
sessions (IPv4 and IPv6) is displayed.
Secure Copy and Secure FTP for IPv6
You can take advantage of the Secure Copy (SCP) and Secure FTP (SFTP)
client applications to provide a secure alternative to TFTP for transferring
sensitive switch information, such as configuration files and login informa-
tion, between the switch and an administrator workstation.
By default, SSH is enabled for IPv4 and IPv6 connections on a switch, and a
single command set is used for both IPv4 and IPv6 file transfers.
SCP and SFTP run over an encrypted SSH session allowing you to use a secure
SSH tunnel to:
■ Transfer files and update Switch software images.
■
Distribute new software images with automated scripts that make it easier
to upgrade multiple switches simultaneously and securely.
HP Switch# show ip ssh
SSH Enabled : Yes Secure Copy Enabled : No
TCP Port Number : 22 Timeout (sec) : 120
Host Key Type : RSA Host Key Size : 2048
Ciphers : aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc,
rijndael-cbc@lysator.liu.se,aes128-ctr,aes192-ctr,aes256-ctr
MACs : hmac-md5,hmac-sha1,hmac-sha1-96,hmac-md5-96
Ses Type | Source IP Port
--- -------- + ---------------------------------------------- -----
1 console |
2 ssh |10.168.31.114 1722
3 inactive |
4 inactive |
Displays the current SSH configuration and status.
The switch uses these five SSH settings internally for
transactions with clients.
With SSH running, the switch supports one console session and up to five other SSH
and Telnet (IPv4 and IPv6) sessions.
WebAgent sessions are also supported, but are not displayed in show ip ssh output.
Source IPv6 IP addresses of SSH clients are displayed in hexadecimal format.