Allied Telesis Summit 24 User's Guide download pdf (Page 40)

40 Summit 300-48 Switch Software User Guide

Managing the Switch

You can specify a list of predefined clients that are allowed SSH2 access to the switch. To do this, you

must create an access profile that contains a list of allowed IP addresses. For more information on

creating access profiles, refer to Chapter 10.

You can also specify a TCP port number to be used for SSH2 communication. By default the TCP port

number is 22.

The supported cipher is 3DES-CBC. The supported key exchange is DSA.

An authentication key must be generated before the switch can accept incoming SSH2 sessions. This can

be done automatically by the switch, or you can enter a previously generated key. To have the key

generated by the switch, use the following command:

config ssh2 key

You are prompted to enter information to be used in generating the key. The key generation process

takes approximately ten minutes. Once the key has been generated, you should save your configuration

to preserve the key.

To use a key that has been previously created, use the following command:

config ssh2 key pregenerated

You are prompted to enter the pregenerated key.

The key generation process generates the SSH2 private host key. The SSH2 public host key is derived

from the private host key, and is automatically transmitted to the SSH2 client at the beginning of an

SSH2 session.

Before you initiate a session from an SSH2 client, ensure that the client is configured for any nondefault

access list or TCP port information that you have configured on the switch. Once these tasks are

accomplished, you may establish an SSH2-encrypted session with the switch. Clients must have a valid

user name and password on the switch in order to log into the switch after the SSH2 session has been

established.

For additional information on the SSH protocol refer to [FIPS-186] Federal Information Processing

Standards Publication (FIPSPUB) 186, Digital Signature Standard, 18 May 1994. This can be download

from: ftp://ftp.cs.hut.fi/pub/ssh. General technical information is also available from:

http://www.ssh.fi

Using SNMP

Any Network Manager running the Simple Network Management Protocol (SNMP) can manage the

switch, provided the Management Information Base (MIB) is installed correctly on the management

station. Each Network Manager provides its own user interface to the management facilities.

The following sections describe how to get started if you want to use an SNMP manager. It assumes

you are already familiar with SNMP management. Extreme Networks products support SNMP v1 and

SNMP v2C.

Accessing Switch Agents

To have access to the SNMP agent residing in the switch, at least one VLAN must have an IP address

assigned to it.

1 2 ... 35 36 37 38 39 40 41 42 43 44 45 ... 197 198

No comments

Allied Telesis Summit 24 User's Guide Page 40