Chapter 15 Configuring Security for the ML-Series Card

Secure Shell on the ML-Series Card

 

Command

Purpose

Step 1

 

 

Router # configure terminal

Enter global configuration mode.

Step 2

 

 

Router (config)# ip ssh version [1 2]

(Optional) Configure the ML-Series card to run SSH Version 1 or SSH

 

 

Version 2.

 

 

1—Configure the ML-Series card to run SSH Version 1.

 

 

2—Configure the ML-Series card to run SSH Version 2.

 

 

If you do not enter this command or do not specify a keyword, the SSH

 

 

server selects the latest SSH version supported by the SSH client. For

 

 

example, if the SSH client supports SSHv1 and SSHv2, the SSH server

 

 

selects SSHv2.

Step 3

 

 

Router (config)# ip ssh timeout

Specify the timeout value in seconds; the default is 120 seconds. The

 

seconds

range is 0 to 120 seconds. This parameter applies to the SSH negotiation

 

 

phase. After the connection is established, the ML-Series card uses the

 

 

default timeout values of the CLI-based sessions.

 

 

By default, up to five simultaneous, encrypted SSH connections for

 

 

multiple CLI-based sessions over the network are available (session 0 to

 

 

session 4). After the execution shell starts, the CLI-based session timeout

 

 

value returns to the default of 10 minutes.

Step 4

 

 

Router (config)# ip ssh

Specify the number of times that a client can reauthenticate to the server.

 

authentication-retries number

The default is 3; the range is 0 to 5.

Step 5

 

 

Router (config)# end

Return to privileged EXEC mode.

Step 6

 

 

Router # show ip ssh

Show the version and configuration information for your SSH server.

 

or

 

 

Router # show ssh

Show the status of the SSH server connections on the ML-Series card.

Step 7

 

 

Router # copy running-config

(Optional) Save your entries in the configuration file.

 

startup-config

 

 

 

 

To return to the default SSH control parameters, use the no ip ssh {timeout authentication-retries} global configuration command.

Displaying the SSH Configuration and Status

To display the SSH server configuration and status, use one or more of the privileged EXEC commands in Table 15-1.

Table 15-1

Commands for Displaying the SSH Server Configuration and Status

 

 

 

Command

 

Purpose

 

 

 

show ip ssh

 

Shows the version and configuration information for the SSH server.

 

 

 

show ssh

 

Shows the status of the SSH server.

 

 

 

Cisco ONS 15310-CL and Cisco ONS 15310-MA Ethernet Card Software Feature and Configuration Guide R8.5

 

78-18133-01

15-5

 

 

 

Page 199
Image 199
Cisco Systems 15310-CL, 15310-MA manual Displaying the SSH Configuration and Status, Router # configure terminal, 15-5

15310-CL, 15310-MA specifications

Cisco Systems has established itself as a leader in the networking domain, offering a wide array of solutions to meet the needs of modern businesses. Among its impressive product lineup are the Cisco 15310-CL and 15310-MA routers, designed to provide advanced network performance and reliability.

The Cisco 15310-CL is a versatile platform that primarily serves as a carrier-class router aimed at supporting high-speed data and voice services. It is built to handle the demands of large enterprises and service providers, offering a robust design that ensures maximum uptime and performance. One of its standout features is its modular architecture, which enables users to customize their configurations based on specific application needs. This scalability allows for future expansion without the need for a complete hardware overhaul.

Key technologies integrated into the Cisco 15310-CL include high-density Ethernet interfaces and a comprehensive suite of Layer 2 and Layer 3 protocol support. The device is capable of supporting multiple types of connections, including TDM, ATM, and Ethernet. This flexibility makes it an ideal choice for organizations that require seamless migration between various service types. Moreover, with features such as MPLS (Multiprotocol Label Switching) support and advanced Quality of Service (QoS) mechanisms, the router ensures that critical applications receive the necessary bandwidth and low latency required for optimal performance.

In contrast, the Cisco 15310-MA focuses on access solutions, providing a cost-effective entry point for businesses looking to enhance their network capabilities. It is well-suited for smaller offices or branch locations that need reliable connectivity without the expense and complexity associated with larger systems. The device supports a range of access methods and provides essential features like firewall capabilities, VPN support, and comprehensive security measures to protect sensitive data.

Both models benefit from Cisco's commitment to security and manageability, offering features like enhanced encryption protocols and user authentication mechanisms that help safeguard networks against threats. Additionally, they can be managed through Cisco’s intuitive software tools, simplifying configuration and monitoring tasks for IT administrators.

The Cisco 15310-CL and 15310-MA are ideal solutions for businesses seeking to enhance their network infrastructure, ensuring firms can keep pace with evolving technology demands while maintaining a focus on security and performance. Their combination of advanced features, modular capabilities, and robust support makes them valuable assets in the networking landscape.