The following table describes the SSHD Configuration Menu options.Table 80 SSHD Configuration Menu options

Command

Description

 

 

intrval <0-24>

Defines interval for auto-generating the RSA server key. The switch will

 

auto-generate the RSA server key at the interval defined in this command.

 

The value of zero (0) means the RSA server key auto-generation is

 

disabled. If the switch has been busy performing any other key generation

 

and the assigned time of interval expires, the RSA server will skip

 

generating the key.

 

 

scpadm

Defines the administrator password that is for Secure Copy (SCP) only. The

 

username for this SCP administrator is scpadmin.

 

Typically, SCP is used to copy files securely from one machine to another.

 

In the switch, SCP is used to download and upload the switch configuration

 

using secure channels.

 

 

hkeygen

Generates the RSA host keys manually. The switch creates this key

 

automatically while configuring the switch with Secure Shell (SSH). But you

 

can generate the key manually by using this command if you need to

 

overwrite the key for security reasons. The command will take effect

 

immediately without executing the apply command.

 

 

skeygen

Generates the RSA server key. The switch creates this key automatically

 

while configuring the switch with Secure Shell (SSH). You can generate the

 

key manually by using this command if you need to overwrite the key for

 

security reasons. The command will take effect immediately without

 

executing the apply command.

 

 

sshport <TCP port number>

Sets the SSH server port number.

 

 

ena

Enables the SCP apply and save.

 

 

dis

Disables the SCP apply and save. This is the default for SCP.

 

 

on

Enables the SSH server.

 

 

off

Disables the SSH server. This is the default for the SSH server.

 

 

cur

Displays the current SSH server configuration.

 

 

RADIUS server configuration

Command: /cfg/sys/radius

[RADIUS Server

Menu]

prisrv

-

Set primary RADIUS server address

secsrv

-

Set secondary RADIUS server address

secret

-

Set primary RADIUS server secret

secret2

-

Set secondary RADIUS server secret

port

-

Set RADIUS port

retries

-

Set RADIUS server retries

timeout

-

Set RADIUS server timeout

telnet

-

Enable/disable RADIUS backdoor for telnet/ssh/http/https

secbd

-

Enable/disable RADIUS secure backdoor for telnet/ssh/http/https

on

-

Turn RADIUS authentication ON

off

-

Turn RADIUS authentication OFF

cur

-

Display current RADIUS configuration

NOTE: See the HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Application Guide for information on

RADIUS.

Configuration Menu 93