Configuring Secure Shell (SSH)
Configuring the Switch for SSH Operation
N o t e
When you generate a host key pair on the switch, the switch places the key
pair in flash memory (and not in the running-config file). Also, the switch
maintains the key pair across reboots, including power cycles. You should
consider this key pair to be “permanent”; that is, avoid re-generating the key
pair without a compelling reason. Otherwise, you will have to re-introduce the
switch’s public key on all management stations you have set up for SSH access
to the switch using the earlier pair.
Removing (zeroing) the switch’s public/private key pair renders the switch
unable to engage in SSH operation and automatically disables IP SSH on the
switch. (To verify whether SSH is enabled, execute
show ip ssh
.)However, any
active SSH sessions will continue to run, unless explicitly terminated with the
CLI 'kill' command.
To Generate or Erase the Switch’s Public/Private Host Key Pair.
Because the host key pair is stored in flash instead of the running-config file,
it is not necessary to use
write memory
to save the key pair. Erasing the key
pair automatically disables SSH.
Syntax:
crypto key generate <autorun-key [rsa] | cert [rsa] <keysize> | ssh [dsa |
rsa] bits <keysize>>
Installs authentication files for ssh or https server, or for
autorun.
autorun-key
Install RSA key for autorun. See “Configuring Autorun
on the Switch” on page A-42 in the Management and
Configuration Guide for more information.
cert
Install RSA key for https certificate. See “Configuring
the Switch for SSL Operation” on page 8-7 in this guide
for more information.
ssh [dsa | rsa]
Install host key for ssh server. Specify the key type as
DSA or RSA.
bits <keysize>
Specify the key size (in bits). See Table 7-2.
zeroize <ssh | cert | autorun [rsa]>
Erases the switch’s public/private key pair and dis
ables SSH operation.
7-10
Содержание PROCURVE 2910AL
Страница 1: ...Access Security Guide ProCurve Switches W 14 03 2910al www procurve com ...
Страница 2: ......
Страница 3: ...HP ProCurve 2910al Switch February 2009 W 14 03 Access Security Guide ...
Страница 84: ...Configuring Username and Password Security Front Panel Security 2 36 ...
Страница 156: ...TACACS Authentication Operating Notes 4 30 ...
Страница 288: ...Configuring Secure Socket Layer SSL Common Errors in SSL setup 8 22 ...
Страница 416: ...Configuring Advanced Threat Protection Using the Instrumentation Monitor 10 28 ...
Страница 516: ...Configuring Port Based and User Based Access Control 802 1X Messages Related to 802 1X Operation 12 76 ...
Страница 527: ...Configuring and Monitoring Port Security Port Security Figure 13 4 Examples of Show Mac Address Outputs 13 11 ...
Страница 572: ...Using Authorized IP Managers Operating Notes 14 14 ...
Страница 592: ...12 Index ...
Страница 593: ......
Страница 594: ... Copyright 2009 Hewlett Packard Development Company L P February 2009 Manual Part Number 5992 5439 ...