Cisco Systems SRW248G4P manual Security SSH Settings, Security SSH Host-Key Settings

Page 34

Chapter 5

Configuring the Switch

Security > SSH Settings

Security > SSH Settings

The Secure Shell (SSH) includes server/client applications that can provide remote management access to the Switch and act as a secure replacement for Telnet..

When the client contacts the Switch through the SSH protocol, the Switch generates a public-key that the client uses along with a local user name and password for access authentication.. SSH also encrypts all data transfers passing between the Switch and SSH-enabled management station clients, and ensures that data traveling over the network arrives unaltered..

NOTE: You need to install an SSH client on the management station to access the Switch for management through the SSH protocol.. The Switch supports both SSH Version 1..5 and 2..0..

SSH Server Status  Allows you to enable/disable the SSH server on the Switch.. (Default: Disabled)

Version  The Secure Shell version number.. Version 2..0 is displayed, but the Switch supports management access via either SSH Version 1..5 or 2..0 clients..

SSH Authentication Timeout (1-120)  Specifies the time interval in seconds that the SSH server waits for a response from a client during an authentication attempt.. (Default:

120seconds)

SSH Authentication Retries (1-5)  Specifies the number of authentication attempts that a client is allowed before authentication fails and the client has to restart the authentication process.. (Default: 3)

SSH Server-Key Size (512-896)  Specifies the SSH server key size.. The server key is a private key that is never shared outside the Switch.. The host key is shared with the SSH client, and is fixed at 1024 bits.. (Default:768)

Security > SSH Host-Key Settings

Security > SSH Host-Key Settings

A host public/private key pair is used to provide secure communications between an SSH client and the Switch.. After generating this key pair, you must provide the host public key to SSH clients and import the client’s public key to the Switch..

Public-Key of Host-Key The public key for the host..

RSA (Version 1)  The first field indicates the size of the host key (e..g.., 1024), the second field is the encoded public exponent (e..g.., 65537), and the last string is the encoded modulus..

DSA (Version 2)  The first field indicates that the encryption method used by SSH is based on the Digital Signature Standard (DSS).. The last string is the encoded modulus..

Host-Key Type  The key type used to generate the host key pair (i..e.., public and private keys).. (Range: RSA (Version 1), DSA (Version 2), Both: Default: RSA) The SSH server uses RSA or DSA for key exchange when the client first establishes a connection with the Switch, and then negotiates with the client to select either DES (56-bit) or 3DES (168-bit) for data encryption..

Save Host-Key from Memory to Flash  Saves the host key from RAM (volatile memory) to flash memory.. Otherwise, the host key pair is stored to RAM by default.. Note that you must select this item prior to generating the host-key pair..

48-Port 10/100 + 4-Port Gigabit Switch with WebView and Power over Ethernet

30

Image 34
Contents User Guide Table of Contents ACL Appendix E Contact Information Appendix a About Gigabit Ethernet and Fiber Optic CablingOnline Resources About This GuideIcon Descriptions Copyright and TrademarksChapter Chapter IntroductionChapter Product Overview Front PanelBack Panel Side PanelPlacement Options Pre-Installation ConsiderationsOverview Desktop Placement Hardware InstallationUplinking the Switch Rack-Mount PlacementChapter Configuration Using Console Interface Configuring the HyperTerminal ApplicationSystem Configuration Menu LoginSwitch Main Menu System ConfigurationManagement Settings User & Password SettingsIP Configuration IP Address SettingsReboot System Restore System Default SettingsFile Management Port Status Port ConfigurationPoE Configuration Back to Main MenuPort PoE Status System PoE ConfigurationPort PoE Configuration LogoutSetup Summary SetupDevice Information PoE Information Setup Network SettingsSystem Information IdentificationSetup Time Set TimeEdit Port Settings Port Management Port SettingsPort Management Port Management Link Aggregation Port Broadcast ControlPort Setting Port Management PoE Power SettingsGlobal Setting Port Management LacpVlan Management Create Vlan Vlan Management Port SettingsVlan Management Create VlanVlan Management Ports to Vlan Vlan Management Vlan to PortsStatistics Rmon Statistics StatisticsStatistics Rmon History Statistics Rmon Alarms Statistics Rmon EventsStatistics Port Utilization Statistics 802.1x StatisticsACL IP based ACL ACL MAC based ACLSecurity Security Authentication ServersRadius Server Setting Security ACL BindingSecurity 802.1x Settings Tacacs Server SettingSecurity Ports Security Security Https Settings Security Management ACLSecurity SSH Settings Security SSH Host-Key SettingsQoS QoS CoS SettingsCoS to Queue Queue Settings QoS Queue SettingsQoS Dscp Settings Port to CoSQoS DiffServ Settings Class MapPolicy Map QoS DiffServ Port Binding Spanning TreeQoS Bandwidth Spanning Tree STP Status Spanning Tree Global STPSpanning Tree STP Port Settings Spanning Tree STP Port Settings STP Port Setting Detail Spanning Tree Rstp Port Settings Spanning Tree Mstp Instance Settings Spanning Tree Mstp PropertiesSpanning Tree Mstp Interface Settings Multicast Multicast Global Settings Multicast Static Member PortsMulticast Member Ports Query Multicast Static Router PortsMulticast Router Ports Query Snmp Global Parameters Snmp Views Snmp Group ProfileSnmp Communities User AuthenticationSnmp Group Membership Data PrivacySnmp Notification Recipient AdminAdmin User Authentication SNMPv1,2Address Aging Admin Forwarding DatabaseStatic Address Setting Dynamic Address QuerySystem Logging Admin LogSyslog Admin Port Mirroring Smtp SettingAdmin Ping Admin Cable TestAdmin Save Configuration Admin Firmware Upgrade Admin Jumbo FrameAdmin Http Upgrade Admin Reboot Admin Factory DefaultGigabit Ethernet Appendix a About Gigabit Ethernet Fiber Optic CablingFiber Optic Cabling Appendix B Appendix B GlossaryGlossary Smtp Simple Mail Transfer Protocol The standard e Appendix B Appendix C Specifications Appendix CSpecifications Appendix D Warranty and Regulatory Information Limited WarrantyIndustry Canada Canada Safety NoticesFCC Statement IC StatementDansk Danish Miljøinformation for kunder i EU La Directiva 2002/96/CE de la UE exige que los equipos que Norsk Norwegian Miljøinformasjon for kunder i EU WEB For additional information, please visit Appendix E

SRW248G4P specifications

Cisco Systems SRW248G4P is a high-performance Layer 2 switch designed specifically for small to medium-sized businesses that require robust networking solutions. This switch supports Power over Ethernet (PoE), providing a highly flexible option for powering devices such as IP phones, wireless access points, and surveillance cameras.

One of the standout features of the SRW248G4P is its 48 10/100 Ethernet ports, which ensure ample connectivity for various networked devices. Additionally, it offers four Gigabit Ethernet uplink ports, allowing for seamless integration with existing network infrastructure and facilitating high-speed data transfer. The combination of these ports enables businesses to expand their network capabilities as needed without the immediate requirement for added devices.

The SRW248G4P comes equipped with advanced Layer 2 switching capabilities, including VLAN support, which enables the segmentation of network traffic for improved performance and security. It also supports Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP), which help prevent network loops and ensure redundancy. With features like Link Aggregation Control Protocol (LACP), multiple physical connections can be combined into a single logical link, enhancing bandwidth and providing failover capabilities.

Another critical attribute of the Cisco SRW248G4P is its user-friendly management interface. The switch can be managed through a web-based interface, allowing IT administrators to configure settings, monitor performance, and troubleshoot issues with ease. Additionally, it supports SNMP (Simple Network Management Protocol) for integration with network management systems, further simplifying monitoring tasks.

Power over Ethernet functionality is a significant advantage of the SRW248G4P, providing up to 15.4 watts per port. This capability simplifies installation and reduces the clutter of power cords and outlets. Organizations can deploy PoE-enabled devices in locations that lack power sources, thus enhancing overall flexibility in network design.

In summary, the Cisco Systems SRW248G4P is a feature-rich switch tailored for small to medium-sized enterprises. Its blend of performance, management capabilities, and advanced features like PoE makes it a valuable asset in any organization's networking setup. By ensuring reliable connectivity and ease of management, businesses can focus more on growth and their core objectives rather than worrying about network complexities.