Remote Console Access, Configuration of SSH

White Paper ⏐ Issue: October 2006 ⏐ Integration of BX600 SB9 Switches in Cisco Networks

Page 38 / 47

Step 3: Test the SNMP configuration using your favorite SNMP management tool

The following tests have been done using NET-SNMP with SNMPv2:

C:\>snmpwalk -v 2c -c read 10.0.1.70 system SNMPv2-MIB::sysDescr.0 = STRING: FSC SwitchBlade SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.231

DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (26581200) 3 days, 1:50:12.00

SNMPv2-MIB::sysContact.0 = STRING: Test123

SNMPv2-MIB::sysName.0 = STRING: bx6-sb9-a

SNMPv2-MIB::sysLocation.0 = STRING: Team PCT

SNMPv2-MIB::sysServices.0 = INTEGER: 6

SNMPv2-MIB::sysORLastChange.0 = Timeticks: (500) 0:00:05.00

C:\>snmpget -v 2c -c write 10.0.1.70 sysContact.0

SNMPv2-MIB::sysContact.0 = STRING: Test123

C:\>snmpset -v 2c -c write 10.0.1.70 sysContact.0 s "SNMP v2c Write Test" SNMPv2-MIB::sysContact.0 = STRING: SNMP v2c Write Test

C:\>snmpget -v 2c -c write 10.0.1.70 sysContact.0

SNMPv2-MIB::sysContact.0 = STRING: SNMP v2c Write Test

C:\>snmpset -v 2c -c read 10.0.1.70 sysContact.0 s "SNMP v2c Read-Only Test" Error in packet.

Reason: noAccess

Failed object: SNMPv2-MIB::sysContact.0

4.3Remote Console Access

4.3.1 Introduction

In addition to the web interface, the SB9 supports three methods of accessing the command line interface:

∙Console access using console redirection of the management blade

∙Telnet access

∙SSH access

During the initial setup, console redirection is the only possible way of accessing the switch. Access using telnet or SSH will subsequently be more convenient.

4.3.2 Recommended Solution

Telnet is an unencrypted protocol, which means that not only the data but also the password is sent unencrypted over IP. For this reason most enterprise customers prefer not to use telnet. SSH encrypts not only the password but also the entire data traffic, and is the preferred protocol for remote console access.

We recommend you to enable SSH and disable telnet access to the switch.

4.3.3 Configuration of SSH

The following steps are necessary to enable SSH and disable telnet.

∙Step 1: Configure the SB9

∙Step 2: Test the login

Step 1: Configure the SB9

!SB9 ssh configuration

!Enable ssh

ip ssh

!Set the procol version 2 ip ssh protocol 2

!Disable telnet

line vty no sessions exit

Step 2: Test the login

One of the popular SSH clients is “putty” which is distributed under license from MIT.

C:\> putty bx6-sb9-b

test-ro @bx6-sb9-b's password:

(bx6-sb9-b) >