Non-Configurable Data | Fujitsu BX600 guide

Security Menu

Web-Based Management Interface

6.2.3.4 Defining Secure Shell Configuration

6.2.3.4.1Configuring Secure Shell Configuration Page Configurable Data

Admin Mode - This select field is used to Enable or Disable the administrative mode of SSH. The currently configured value is shown when the web page is displayed. The default value is Disable.

SSH Version 1 - This select field is used to Enable or Disable Protocol Level 1 for SSH. The currently configured value is shown when the web page is displayed. The default value is Enable.

SSH Version 2 - This select field is used to Enable or Disable Protocol Level 2 for SSH. The currently configured value is shown when the web page is displayed. The default value is Enable.

Maximum Number of SSH Sessions Allowed - This select field is used to configure the maximum number of inbound SSH sessions allowed on the IBP. The currently configured value is shown when the web page is displayed. The range of acceptable values for this field is (0-5).

SSH Session Timeout (Minutes) - This text field is used to configure the inactivity timeout value for incoming SSH sessions to the IBP. The acceptable range for this value is (1-160) minutes.

Non-Configurable Data

SSH Connections in Use - Displays the number of SSH connections currently in use in the system.

Command Buttons

Submit - Send the updated screen to the IBP. Changes take effect on the IBP but these changes will not be retained across a power cycle unless a save is performed.

Download Host Keys - Link to the File Transfer page for the Host Key download. Note that to download SSH key files SSH must be administratively disabled and there can be no active SSH sessions.

98	Intelligent Blade Panel Module

Image 99

Fujitsu BX600 manual Non-Configurable Data

Contents

Primergy BX600 Blade Server Systems Primergy BX600 Blade Server Systems Comments… Suggestions… Corrections… Page Contents Intelligent Blade Panel Module Intelligent Blade Panel Module Intelligent Blade Panel Module Information About Boards Important Notes Industry Canada Class a Compliance Statements LVD Taiwan Bsmi Class a Australia AS/NZS 3548 1995 Class a Introduction Features of the IBP Module Automatic Aging for MAC Addresses Layer 2 Features Igmp SnoopingVlan Transparency Supported Features Self-Learning MAC Addresses Port Group Support Service Vlan & Service LAN SupportPort Backup Support Uplink Set Support Various Files of Management Operation BootP and Dhcp ClientsIBP Module Management Features Save Configuration as file Provision Snmp Alarms and Trap LogsConfiguration File Download and Upload Command Line Interface Radius Client Security FeaturePort Based Authentication Locked Port Support System LED Description of Hardware Internal Ports Page Primergy BX620 Primergy GbE Switch Blade 30/12 Internal Ports List Connectivity Features and BenefitsStatus of LEDs Port LEDs Management Performance Notational Conventions Target Group National and international standards Technical DataDimensions Electrical data Environmental conditions Introduction to IBP Network Planning Making Network Connections Connecting to 1000BASE-T Devices 1000BASE-T Cable Requirements Cable Testing for Existing Category 5 Cable 1000BASE-T Pin Assignments Adjusting Existing Category 5 Cabling for 1000BASE-T Package Contents OverviewUnpacking the IBP Module Mount the IBP Module Connecting the IBP Module Select 2 Console Redirection Switch Blade Port Default Settings Start up and Configuration the IBP Module Under Properties, select VT100 for Emulation mode Configuring the Terminal Booting Device Erasing the Device Configuration Boot Image DownloadSoftware Download System Image Download Operation Code CLI Software Download Through Tftp Server Tftp Enter y. The device reboots Overview Main Menu Configurable DataNon-Configurable Data Command Buttons View Uplink Set Information Groups Administration Managing Port Groups Configuring Port Group Configuration Command Buttons Viewing Port Group Information Selection Criteria Viewing Vlan Port Group Information Groups Administration Configurable Data Viewing Service LAN Information Groups Administration Configurable Data Viewing Service Vlan Information Groups Administration Managing Port Backup Configuring Port Backup Configuration Viewing Port Backup Status Groups Administration Panel Settings Menu Panel Settings Menu Viewing Panel Description Page Configurable Data Terminal interface via the EIA-232 port Configuring Inband Administration Panel Settings Menu Configuring Telnet Session Page Configurable Data Panel Settings Menu Configuring Serial Port Page Configurable Data Selection Criteria Panel Settings Menu Configuring Dhcp Client-identifier Defining Dhcp Client Configuring Dhcp Restart Defining Snmp Configuring Snmp Community Configuration Configuring Snmp Trap Receiver Configuration Viewing Snmp supported MIBs Panel Settings Menu Panel Settings Menu Viewing Sntp Global Status Non-Configurable Data Configuring Sntp Server Configuration Configurable Data Unknown IPV4 Viewing Sntp Server Status Non-Configurable Data Panel Settings Menu Configurable Data Panel Settings Menu Refresh Refresh the configuration value again Managing System Utilities Panel Reset Command Buttons Reset All Configuration to Defaults Page Command ButtonsReset the Passwords to Defaults Page Command Buttons Configurable Data Uploading Specific Files from Panel Removing Specific File Defining Ping Function Copying Running Configuration to Panel Submit This will initiate the ping Security Menu Viewing Radius Statistics Page Non-Configurable Data Viewing Radius Server Statistics Page Selection Criteria Security Menu Security Menu Resetting All Radius Statistics Page Command Buttons Configurable Data Security Menu Non-Configurable Data Security Menu Viewing Buffered Log Extended Configuration Menu Configuring Command Logger Page Configurable Data Viewing Event Log Configuring Console Log Configuring Hosts configuration Page Configurable Data Configuring syslog configuration Page Configurable Data Extended Configuration Menu Viewing Login Session Page Non-Configurable Data 107 Intelligent Blade Panel Module 108 Intelligent Blade Panel Module 109 Intelligent Blade Panel Module 110 Intelligent Blade Panel Module 111 112 Intelligent Blade Panel Module 113 Intelligent Blade Panel Module Extended Configuration Menu Extended Configuration Menu Viewing Each Port Summary Statistics Page Selection Criteria 117 Intelligent Blade Panel Module 118 Intelligent Blade Panel Module 119 Intelligent Blade Panel Module 120 Intelligent Blade Panel Module Viewing Access Control Summary Page Non-Configurable Data 122 Intelligent Blade Panel Module 123 Intelligent Blade Panel Module Defining Access Control User Login Page Selection Criteria Defining Each Port Access Privileges Page Selection Criteria Extended Configuration Menu Managing IP Filter IP Filter Configuration 128 Intelligent Blade Panel Module Defining User Login 130 Intelligent Blade Panel Module Example Clear port-group CLI Command FormatCommand Example Ip address ipaddr netmask vlan-id 2CLI Mode-based Topology ParametersValues Annotations ConventionsNetwork Address Syntax Address Type Format Range IPAddr MacAddr System Information and Statistics commands Show eventlog Show running-config Show sysinfo Show running-config all scriptname Show system System InformationShow hardware Show version Show loginsession 4Device Configuration Commands Interface Show interface statusShow interface status slot/port all Show interface Show interface slot/portShow interface counters 142 Intelligent Blade Panel Module Show interface counters detailed slot/port switchport Total Packets Received Without Errors Total Packets Received with MAC ErrorsTotal Packets Transmitted Octets Total Transmit Errors Total Packets Transmitted SuccessfullyTotal Transmited Packets Discards 146 Intelligent Blade Panel Module Show interface IBP Show interface switch Interface range Interface Full duplex Full duplex half duplex Half duplex Speed-duplexSpeed-duplex 10 100 full-duplex half-duplex Speed-duplex all 10 100 full-duplex half-duplex Negotiate Negotiate no negotiateNegotiate all no negotiate all Capabilities Description Storm-control flowcontrolStorm-control flowcontrol no storm-control flowcontrol Syntax Show mac-addr-table macaddr all Show mac-address-table igmpsnooping Show mac-address-table multicast macaddr vlanid all Show mac-address-table multicast Show mac-address-table agetime Show mac-address-table stats Default SettingShow mac-address-table agetime Default Setting Show mac-address-table stats Mac-address-table aging-time Igmp Snooping Show Commands Show igmp snooping Lacp uplinkSetName no lacp uplinkSetName Configuration Commands IgmpsnoopingIgmpsnooping uplinkSetName no igmpsnooping uplinkSetName Port Channel Lacp Show lacp Uplink Sets Show Commands Configuration Commands Uplink-set Uplink-set uplinkSetName no uplink-set uplinkSetNamePort Group Port-group portGroupName no port-group portGroupName Configuration Commands Port-group Port Backup Show Commands Port-backup no port-backup Configuration Commands Port-backupPort-backup uplinkSetName no port-backup uplinkSetName Default Setting Command Mode Configuration Commands Linkstate Link State Show Commands Vlan Port Groups Show Commands Linkstate uplinkSetName no linkstate uplinkSetNameShow vlan-group vlanGroupName Vlan-group vlanGroupName no vlan-group vlanGroupName Configuration Commands Vlan-group 167 Intelligent Blade Panel Module Configuration Commands Svc-lan Service LAN Show Commands Svc-lan svcLanName no svc-lan svcLanName Configuration Commands Svc-vlan Service Vlan Show Commands Svc-vlan svcVlanName no svc-vlan svcVlanName Management Commands Network Commands Show ip interfaceShow ip redirects Show ip filter 1.4 mtuMtu 1518-9216 no mtu Ip address Command UsageIp default-gateway Ip default-gateway gateway no ip default-gateway Ip address protocol bootp dhcp vlanID none Ip address protocolIp address mgmt-vlan Ip filter no ip filter Ip filter Ip filter ipaddr no ip filter ipaddr Serial Interface Commands Show line console Baudrate Line console Exec-timeout Password-thresholdPassword-threshold 0-120 no password-threshold Telnet Session Commands Silent-timeTelnet host port debug line echo Line vty Show line vty Exec-timeout 1-160 no exec-timeout Maxsessions Maxsessions 0-5 no maxsessionsSessions Telnet maxsessions Sessions no sessionsTelnet sessions Telnet sessions no telnet sessions Telnet exec-timeout Telnet exec-timeout 1-160 no telnet exec-timeoutTelnet maxsessions 0-5 no maxsessions Show telnet Snmp Server Commands Show snmp Show trapflags Syntax Snmp-server location loc Snmp-server sysnameSnmp-server sysname name Snmp-server location Snmp-server contact Snmp-server communitySnmp-server community name no snmp-server community name 190 Intelligent Blade Panel Module Snmp-server community ro rw name Snmp-server enable traps Snmp-server hostSnmp-server host ipaddr name no snmp-server host name No This command disables Multiple User trap Snmp Trap Commands Show snmptrap Snmp trap link-status Snmp trap link-status no snmp trap link-statusSnmp trap link-status all no snmp trap link-status all Snmptrap name ipaddr Snmptrap name ipaddr no snmptrap name ipaddrSnmptrap ipaddr Snmptrap ipaddr name ipaddr ipaddrnew Snmptrap modeSnmptrap mode name ipaddr no snmptrap mode name ipaddr Http commands Show ip http Ip javamode no ip javamode Ip javamode Ip http server no ip http server Ip http portIp http port 1-65535 no ip http port Ip http server Ip http secure-server no ip http secure-server Ip http secure-portIp http secure-port portid no ip http secure-port Ip http secure-server Ip http secure-protocol Secure Shell SSH Commands Show ip ssh Ip ssh Ip ssh no ip sshIp ssh protocol Ip ssh timeout Ip ssh maxsessionsIp ssh maxsessions 0-5 no ip ssh maxsessions Ip ssh timeout 1-160 no ip ssh timeout Dhcp Client Commands Ip dhcp restartIp dhcp client-identifier System Burned In MAC Address Lockmessage Lock CommandsLockmessage messagestring default Lock lockidentifier Exclusive no lock lockidentifierALL Show lock Lockreset System Log Management Commands Show Commands Show loggingShow logging buffered Show logging traplog Show logging traplogsShow logging hosts Configuration Commands Logging buffered Display Message Index used for deletingLogging buffered no logging buffered Logging buffered wrap no logging buffered wrap Logging consoleLogging console severitylevel 0-7 no logging console Logging host hostaddress port severitylevel Logging host Logging host reconfigure hostindex hostaddress Logging syslogLogging syslog no logging syslog Clear logging buffered Logging syslog port portid no logging syslog port Script delete Script Management CommandsScript apply Script apply scriptname Script list Script showScript show scriptname User Account Management Commands Show Commands Show usersConfiguration Commands Username Username snmpv3 authentication Username username password nopassword no username username Username snmpv3 encryption Security Commands Show Commands Show users authenticationShow authentication Show dot1x Show authentication users Show dot1x detail Show dot1x statistics slot/port Show dot1x statistics Show dot1x summary Show dot1x summary slot/port allShow dot1x users Secret Configured Yes / No Show radius-serversShow radius Show radius accounting statistics ipaddr Radius Accounting Mode Enabled or disabled Secret Configured Yes or No Show radius statisticsShow radius statistics ipaddr Show tacacs Show port-security Show port-security dynamic slot/port Configuration Commands Authentication login Possible method values are local, radius, reject, and tacacs Username defaultlogin Username login user listname Username login 3.2 dot1x default-login 3 Dot1x Configuration Commands 3.1 dot1x initialize Dot1x system-auth-control no dot1x system-auth-control 3.3 dot1x loginDot1x login user listname 3.4 dot1x system-auth-control 3.6 dot1x port-control 3.5 dot1x user 3.7 dot1x max-req Dot1x max-req 1-10 no dot1x max-req 3.8 dot1x re-authenticationDot1x re-authentication no dot1x re-authentication 3.9 dot1x re-reauthenticate 3.10 dot1x timeout Radius accounting mode no radius accounting mode Radius Configuration Commands Radius accounting mode Radius-sever key Radius-server host Retries the maximum number of times Range 1 Radius-server retransmit Radius-server timeout Radius-server timeout seconds no radius-server timeoutRadius-server msgauth Tacacs Configuration Commands Radius-server primaryTacacs no tacacs Tacacs server-ip 1-3 ipaddr no tacacs server-ip Tacacs modeTacacs mode 1-3 master slave no tacacs mode Tacacs server-ip Tacacs key 1-3 no tacacs key Tacacs portTacacs port 1-3 1-65535 no tacacs port Tacacs key Tacacs retry 1-3 1-9 no tacacs retry Tacacs timeoutTacacs timeout 1-3 1-255 no tacacs timeout Tacacs retry Port Security Configuration Commands Port-security Port-security no port-security Default SettingPort-security max-dynamic Port-security max-static 0-20 no port-security max-static Port-security max-static Syntax Port-security mac-address move Default Setting Port-security mac-addressPort-security mac-address move Sntp Commands Show Commands Show sntpShow sntp client Configuration Commands Sntp client mode Sntp client mode broadcast unicast no sntp client modeSntp broadcast client poll-interval Sntp client port Sntp client port portid 6-10 no sntp client portSntp unicast client poll-interval Sntp unicast client poll-retry Sntp unicast client poll-timeout Sntp clock timezone Sntp server Clear Clear arp System Utilities10.2.9 Sntp clock timezone name 0-12 0-59 before-utc after-utc Clear eventlog Clear traplog Clear pass Clear config Clear counters slot/port all Syntax Clear mac-addr-table dynamic Default SettingClear mac address table Clear counters Clear igmp snooping Enable passwd Clear ip filter Clear dot1x statisticsClear dot1x statistics all slot/port Clear radius statistics Clear tacacsCopy Privileged Exec Files download from PC to board Syntax Copy running-config startup-config filename Copy clibanner url copy url clibanner no clibanner Delete11.4 dir Display Message Column Heading Description Dir boot-rom config opcode filenameWhichboot Boot-system Ping Boot-system boot-rom config opcode filename Traceroute Calendar set mm/dd/yy hhmmss Logging cli-commandSyntax Logging cli-command Default Setting Calendar set Disconnect 0-10 all ConfigureReload Disconnect Quit Promptstring Prompt string Default SettingHostname Hostname promptstring Ip dhcp client-identifier text text hex hex Dhcp Commands Using Snmp Standard MIBs are listed in the following table Supported MIBs Private enterprise MIB is listed below RFC 2233 IF-MIB Accessing MIB Objects Accessing MIB ObjectsUsing Snmp 279 Intelligent Blade Panel Module Snmp traps supported include the following items Supported Traps Overview system default settings Default Settings SSL Default settings for all the configuration commandsPage In-band Administration SSH DSA Key SSH RSA1 Key SSH RSA2 Key Diagnosing IBP Indicators Troubleshooting and Tips Symptom Action Accessing the Management Interface