Using Secure Shell

Logging Into the Switch

 

 

 

 

Using Secure Shell

The OmniSwitch Secure Shell feature provides a secure mechanism that allows you to log in to a remote switch, to execute commands on a remote device, and to move files from one device to another. Secure Shell provides secure, encrypted communications even when your transmission is between two untrusted hosts or over an unsecure network. Secure Shell protects against a variety of security risks including the following:

IP spoofing

IP source routing

DNS spoofing

Interception of clear-text passwords and other data by intermediate hosts

Manipulation of data by users on intermediate hosts

Note. The OmniSwitch supports Secure Shell Version 2 only.

Secure Shell Components

The OmniSwitch includes both client and server components of the Secure Shell interface and the Secure Shell FTP file transfer protocol. SFTP is a subsystem of the Secure Shell protocol. All Secure Shell FTP data are encrypted through a Secure Shell channel.

Since Secure Shell provides a secure session, the Secure Shell interface and SFTP are recommended instead of the Telnet program or the FTP protocol for communications over TCP/IP for sending file transfers. Both Telnet and FTP are available on the OmniSwitch but they do not support encrypted passwords.

Note. Secure Shell may only be used to log into the switch to manage the switch. It cannot be used for Layer 2 authentication through the switch.

Secure Shell Interface

The Secure Shell interface is invoked when you enter the ssh command. After the authentication process between the client and the server is complete, the remote Secure Shell interface runs in the same way as Telnet. Refer to “Starting a Secure Shell Session” on page 1-11to for detailed information.

Secure Shell File Transfer Protocol

Secure Shell FTP is the standard file transfer protocol used with Secure Shell version 2. Secure Shell FTP is an interactive file transfer program (similar to the industry standard FTP) which performs all file transfer operations over a Secure Shell connection.

You invoke the Secure Shell FTP protocol by using the sftp command. Once the authentication phase is completed, the Secure Shell FTP subsystem runs. Secure Shell FTP connects and logs into the specified host, then enters an interactive command mode. Refer to “Starting a Secure Shell Session” on page 1-11for detailed information.

page 1-8

OmniSwitch 6600 Family Switch Management Guide March 2005

Page 24
Image 24
Alcatel Carrier Internetworking Solutions omniswitch Using Secure Shell, Secure Shell Components, Secure Shell Interface

omniswitch specifications

Alcatel Carrier Internetworking Solutions offers the OmniSwitch series, renowned for its robust capabilities in delivering high-performance networking solutions tailored for a variety of enterprise and service provider environments. The OmniSwitch series is particularly recognized for its scalability, flexibility, and the depth of its feature set, making it a popular choice for organizations that demand reliable and efficient networking solutions.

One of the standout features of the OmniSwitch series is its advanced Layer 2 and Layer 3 switching capabilities, providing organizations with essential support for IP routing and robust Ethernet networking. This versatility ensures that the switch can seamlessly integrate into existing network architectures, facilitating smooth upgrade paths in response to evolving business needs. The OmniSwitch includes support for multiple protocols like RIP, OSPF, and BGP, making it suitable for complex networking topologies.

In terms of performance, OmniSwitch devices are engineered to handle high bandwidth demands. With features such as hardware-based forwarding, they ensure low latency and minimal packet loss, which are critical for applications sensitive to delays such as VoIP and video conferencing. Furthermore, they support Power over Ethernet (PoE), allowing users to power devices like IP phones and security cameras directly through the network.

Security is another key characteristic of the OmniSwitch series. It includes advanced security features such as robust access control lists (ACLs), port security, and built-in support for IEEE 802.1X authentication. These features collectively enhance the security posture of the network, protecting sensitive data and ensuring that only authorized devices can access the network resources.

The OmniSwitch is also designed with redundancy and reliability in mind. Features like Rapid Spanning Tree Protocol (RSTP) and Virtual Router Redundancy Protocol (VRRP) ensure that network uptime is maximized and that failover is swift in the event of a hardware failure. This makes it a viable option for organizations that cannot afford downtime.

In addition to these features, Alcatel's OmniSwitch series comes equipped with a user-friendly management interface. This interface simplifies the setup, configuration, and monitoring of the network, making it accessible even to those with limited networking expertise. Through intuitive dashboards and support for SNMP, administrators can manage their networks effectively.

In conclusion, Alcatel Carrier Internetworking Solutions' OmniSwitch series offers a comprehensive suite of features tailored to meet the needs of modern networks. With its blend of performance, scalability, security, and ease of management, the OmniSwitch stands out as a preferred choice for businesses seeking to enhance their networking infrastructure.