ZyXEL Communications XS-3900-48F, Руководство пользователя

Страница: 287 / 332

Chapter 36 Access Control
XS3900-48F User’s Guide
287
36.5 Service Access Control Overview
This section introduces some of the services you can use to access and manage the Switch.
36.5.1 SSH
Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure
communication protocol that combines authentication and data encryption to provide secure
encrypted communication between two hosts over an unsecured network.
Figure 172
SSH Communication Example
The following table summarizes how a secure connection is established between two remote hosts.
Figure 173
How SSH Works
1
Host Identification
The SSH client sends a connection request to the SSH server. The server identifies itself with a host
key. The client encrypts a randomly generated session key with the host key and server key and
sends the result back to the server.
The client automatically saves any new server public keys. In subsequent connections, the server
public key is checked against the saved version on the client computer.