Using SSH and SCP Client Commands | IBM Partner Pavilion BMD00082

SmartConnect User’s Guide

Configuring the SCP Administrator Password

To configure the SCP Administrator password, first connect to the switch via the management system. For security reasons, the scpadm password may only be configured when connected through the management system.

To configure the password, enter the following command via the CLI. At factory default set- tings, the current SCP administrator password is PASSWORD.

>>/cfg/sys/sshd/scpadm

Changing SCP-only Administrator password; validation required...

Enter current administrator password: <password>

Enter new SCP-only administrator password: <new password>

Re-enter new SCP-only administrator password: <new password> New SCP-only administrator password accepted.

Using SSH and SCP Client Commands

This section shows the format for using some client commands. For the examples below, the IP address of the switch is 205.178.15.100, the IP address of the management system is 205.178.15.157, and 1022 as the SSH port number.

To Log In to the Switch:

Syntax:

ssh -1<username> <switch IP address> or

ssh -p<SSH port number> -1<username> <Advanced MM IP address>

Example:

>># ssh -1 scpadmin205.178.15.100

or

>># ssh -p 1022 -1 scpadmin@205.178.15.157

80 Chapter 6: Configuring Switch Access

BMD00082, February 2009

Image 82

IBM Partner Pavilion BMD00082 manual Configuring the SCP Administrator Password, Using SSH and SCP Client Commands

Contents

User’s Guide SmartConnect User’s Guide Contents Switch Virtualization Part 2 BBI Reference Boot Management Switch Statistics SmartConnect User’s Guide Preface Who Should Use This User’s Guide What You’ll Find in This User’s Guide Part 1 Basic Concepts and ConfigurationPart 2 BBI Reference Typographic Conventions How to Get HelpTypographic Conventions 10 „ Preface Part 1 Basic Concepts & Configuration 12 „ Part 1 Basic Concepts & Configuration VSE SmartConnect Software Operation VSE SmartConnect Software Overview 14 „ VSE SmartConnect Software Operation Configuring the Chassis Processor Blades Configuring the Chassis Management SystemConfiguring the Upstream Networking Device VSE SmartConnect Software Quick Start 16 „ VSE SmartConnect Software Operation Getting Started with the Browser- Based Interface Web Browser Set UpRequirements ASmartConnect Login Prompt Starting the BBI Bbbi Startup Screen Updating the Software Image Transferring the New Image to the SwitchLoading the New Software Image CBoot Management Window shown with Stacking enabled Uploading a Software Image from the Switch Selecting a Software Image to Run Selecting a Configuration Block Active, backup, or factory Resetting the Switch Switch Virtualization Port Groups Virtual Switch GroupsVirtual Machine Groups Link Aggregation Network Segmentation Port AccessVLANs Port-Based Vlan Tagging Defined VLANs Trunking External Trunks ATrunking External Ports Trunking Rules Statistical Load Distribution Built-In Fault ToleranceSwitch Failover Link Aggregation Control Protocol Setting the Number of Links to Trigger Failover Configuring Switch Failover Internal Trunks CTrunking Internal Ports Igmp Snooping Configuring a Backup Server Port ServerMobility General Configuration 1ServerMobility General Configuration Fields Configuration Port Configuration2ServerMobility Port Configuration Fields Dhcp Server Configuration SmartConnect User’s Guide 42 „ Switch Virtualization Stacking Stack Membership BackupStacking Requirements Master Master and Backup Selection Master and Backup Behavior Configuring a Stack Stack Member Numbers Configuring Each Switch Configure the Stack Trunk ports optional # cfg/stack/mif Locating the Master Switch Internal Management IP Interface Additional Master ConfigurationViewing Stack Connections CStack Switch Configuration Window Binding Members to the Stack Configuring an External IP Address for the Stack DStack IP Interfaces Configuration Window Managing a Stack EPort Status with Stacking Stacking Port Numbers Stacking Internal Port SettingsAdditional Internal Port Settings for Stacking Stacking VLANs Stacking Boot Management buttons Stacking Boot ManagementUpgrading Stack Software Info/stack/pushstat Command Reference CLI Menus Menu Summary „ Statistics Menu „ Boot Options Menu Viewing Pending Changes Viewing, Applying, and Saving ChangesApplying Pending Changes Saving the Configuration # save Configuring Switch Access Management Module Setup Configuring the Default Gateway Factory Default vs. MM Assigned IP AddressesSwitch IP Addresses, Based on Switch-Module Bay Numbers Configuring Management Module for Switch Access ASwitch Configuration in the Management Module Window Cfg/sys/access/https/access e Using Telnet Connect to the Switch via SSH Access via Http Using the Browser-Based InterfaceAccess via Https Https//192.168.70.127 Securing Access to the Switch Setting Allowable Source IP Address Ranges Configuring an IP Address Range for the Management Network User Access Levels Radius Authentication and AuthorizationConfiguring Radius User Accounts User Name/Access User-Service-Type Value 3SmartConnect-Proprietary Attributes for Radius Authorization TACACS+ AuthenticationTACACS+ Authentication Features Configuring TACACS+ Authentication End User Access Control Considerations for Configuring End User Accounts Configuring End-User Access Control Logging in to an End-User Account Protected Mode CSwitch Protected Mode Configuration Window Secure Shell and Secure Copy Configuring SSH/SCP Features Enabling or Disabling SCP Apply and Save Using SSH and SCP Client Commands Configuring the SCP Administrator PasswordTo Log In to the Switch To Download the Switch Configuration Using SCP To Upload the Configuration to the Switch Apply and Save the Configuration SSH and SCP Encryption of Management Messages Generating RSA Host and Server Keys for SSH Access Cfg/sys/sshd/skeygen Using SecurID with SSH SSH/SCP Integration with Radius AuthenticationSSH/SCP Integration with TACACS+ Authentication SecurID Support Using SecurID with SCP 86 „ Configuring Switch Access Part 2 BBI Reference 88 „ Part 2 BBI Reference Understanding the Browser-Based Interface SmartConnect BBI Screen AMain VSE SmartConnect Software Screen Port Status Area 1Port Status Colors Menu Area Bvse SmartConnect Software Menu Area Configuration Window Configuration Buttons 94 „ Understanding the Browser-Based Interface Virtual Switch Groups Port Groups Virtual Machine Groups Link Aggregation Assigning Ports to VSGs Virtual Switch Groups MembershipSwitch Management Ports Assigning Virtual Machines to VSGs Delete Virtual Switch Group Settings Virtual Switch Groups SettingsSwitch Failover Igmp Snooping Reset to DefaultLink Aggregation Control Protocol Bpdu Policy Virtual Switch Groups ACL QoS Add or remove ACLs or ACL sets for the specified VSG ports Switch Policies Internal Port Settings Internal Port Settings Fields External Port Settings 2External Port Settings Fields Management Port Settings Management Port Settings Fields Port Mirroring ACL Configuration Table Access Control ListsSearching for an Existing ACL Adding a New ACL „ or 4ACL Configuration Fields Access Control ListAdd or Edit ACLs Number, just as with sport above 6ACL Remarking Configuration Fields ACL Metering Settings5ACL Metering Configuration Fields ACL Remark Control Access Control List Sets 7ACL Sets Configuration Fields Quality of Service Ieee 8021p for MAC-Level QoS 8DSCP Configuration Fields DiffServ Code Point QoS 4FB2F3A86E3435548B0BD82DF2B7E949 ServerMobility General Configuration 9ServerMobility General Configuration Fields ServerMobility Port Configuration 10ServerMobility Port Configuration Fields System Settings 1SNMP Management Fields Management SettingsSystem Log 2Management Fields General Settings 3General Configuration Fields 4Built-In User Administration Fields Local User AdministrationBuilt-In Users User Configuration 5Local User Administration Fields Remote User Administration 6RADIUS Fields TACACS+ 7TACACS+ Fields NTP Settings Time Services SettingsGeneral Settings 8Time Services General Settings Fields Switch Protected Mode ErrDisable System Settings10ErrDisable Configuration Fields 11Management Network Configuration Fields Management Network SettingsBootstrap Protocol Settings 12BOOTP Configuration Fields Switch Telnet Settings SSH/Telnet SettingsSwitch SSH Settings 13SSH Configuration Fields Virtual Machine Group Settings 15VM Group Configuration Fields Syslog Settings Stack Switch Configuration Stacking ConfigurationStack Switch Configuration Fields „ Stack Switch Configuration on „ Managing a Stack on Stack IP Interfaces 132 „ System Settings Boot Management General Boot Settings Boot Management buttons Figuration block Boot Schedule 2Boot Schedule Fields 136 „ Boot Management Switch Information Access Control List Information Access Control List Sets Information ARP Cache Information Bootstrap Protocol Relay Information2BOOTP Relay Information Fields 1ARP Cache Information Fields Forwarding Database Information 3FDB Information Fields Virtual Switch Group Information 4Virtual Switch Group Information Fields Igmp Snooping Multicast Router Ports Igmp InformationIgmp Multicast Groups 5IGMP Multicast Groups information IP Information Default Gateways8Default Gateway information IP Interfaces Link Status Information 9Link Status information ServerMobility General Information 10ServerMobility General information ServerMobility Port Information Server Mobility Port information SNMPv3 Information 12SNMPv3 information SNMPv3 information VacmSecurityToGroup Table Syslog Messages SnmpTargetParams Table Transceiver information Port Transceiver StatusTrunk Groups Information Trunk Group information Virtual Machine Group Information User Access informationUser Information VM Group information 152 „ Switch Information Access Control List Statistics Switch Statistics1ACL Statistics Layer 3 Statistics Address Resolution Protocol StatisticsFDB Statistics 2FDB Statistics Icmp Statistics 4ICMP Statistics TCP Statistics 5TCP Statistics UDP Statistics 6UDP Statistics Igmp Group Snooping Statistics Summary 7IGMP Snooping Statistics IP Statistics 8IP Statistics MP-Specific Information Dont Fragment flag was set 9CPU Utilization CPU UtilizationMP Packet Statistics 10MP Packet Statistics Port Statistics Switch Ports Statistics SummaryNetwork Time Protocol Statistics NTP Statistics Symbols Index TACACS+