ZyXEL Communications GS2210-24, Руководство пользователя

Страница: 379 / 444

Chapter 43 Access Control
GS2210 Series User’s Guide
379
Figure 265 How SSH Wor k s
1 Host I dent ificat ion
The SSH client sends a connect ion r equest t o t he SSH ser ver. The ser ver ident ifies it self w it h a host
key. The client encrypt s a random ly generat ed session key w it h t he host key and ser ver key and
sends t he r esult back t o t he ser ver.
The client aut om at ically saves any new ser ver public keys. I n subsequent connect ions, t he ser ver
public key is checked against t he saved ver sion on t he client com put er.
2 Encr ypt ion Met hod
Once t he ident ificat ion is ver ified, bot h t he client and ser ver m ust agr ee on t he t ype of encr ypt ion
m et hod t o use.
3 Aut hent icat ion and Dat a Transm ission
Aft er t he ident ificat ion is ver ified and dat a encrypt ion act ivat ed, a secur e t unnel is est ablished
bet w een t he client and t he ser ver. The client t hen sends it s aut hent icat ion infor m at ion ( user nam e
and passw or d) t o t he ser ver t o log in t o t he ser ver.
43.7.2.2 SSH Implementation on the Switch
Your Swit ch support s SSH ver sion 2 using RSA aut hent icat ion and t hr ee encr ypt ion m et hods ( DES,
3DES and Blow fish) . The SSH ser ver is im plem ent ed on t he Sw it ch for rem ot e m anagem ent and file
t ransfer on por t 22. Only one SSH connect ion is allow ed at a t im e.
43.7.2.3 Requirements for Using SSH
You m ust inst all an SSH client program on a client com put er ( Windows or Linux operat ing syst em )
t hat is used t o connect t o t he Sw it ch over SSH.