Disabling SSh, To display the SSh port | Intel A31032-001 guide

C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide

To display the SSh port:

Intel 7115> show ssh_port

SSH Port Number: 220

Disabling SSh

SSh sessions are disabled at the 7110/7115’s local serial console. To disable, follow the steps below:

Intel 7115> set ssh disable

To verify SSh disable:

Intel 7115> show ssh

SSH: disable

To ensure that SSh sessions remain disabled across a device shutdown and startup, run the config save command.

SNMP

The Intel® NetStructure™ 7110/7115 e-Commerce Accelerator has

a fully compliant, embedded SNMP agent that supports SNMPv1 and SNMPv2 requests. In addition to standard MIB-II, Intel private enterprise MIBs provide the following capabilities:

•Monitor the health of the 7110/7115’s hardware and network links

•Monitor the flags used to enable and disable alarms and monitors

•Monitor the 7110/7115’s load as indicated by CPU utilization, connection count, and connections per second

•Monitor status and performance of SSL encryption and decryption functions

•Monitor overloads, spills, and throttles

6-8

Image 114

Intel A31032-001 manual Disabling SSh, To display the SSh port, To verify SSh disable, Intel 7115 set ssh disable

Contents

Intel NetStructure 7110/7115 e-Commerce Accelerator Version Copyright Trademarks Table of Contents Theory of Operation Scenarios Remote Management Alarms and Monitoring Troubleshooting Appendix a Front Panel List of Figures Xii Introduction About this User Guide New in This Release Remote Management Who Should Use this Book Before You Begin How to Use this Book Glossary defines terms appearing in this User Guide Page Installation and Initial Configuration Installing the 7110/7115 Free- Standing or in a Rack Rack Installation Free-Standing Installation Network Connections Network and Server LEDs Admin Terminal ConnectionStatus Check Inline LED HyperTerminal§ Paste Operations Troubleshooting Continuing ConfigurationServer and Network LEDs Theory of Operation SecuritySingle Server Acceleration 7110/7115 in Single Server Configuration Multiple Servers Working with Internet Traffic Management ITM Devices Positioning 7110/7115 between ITM Device and Client Network Positioning 7110/7115 between ITM Device and Server Scalability and CascadingSpilling and Throttling Keys and Certificates Availability Cutting and Pasting with HyperTerminal§ Create a Certificate Signing Request ProcedureCreate a key Type the create key command at the prompt Intel 7115 create sign Certificate REQUEST----- lines Intel 7115 export sign mywebserverAsciix Enter Typically, the CSR will look something like this Enter Save the configuration when the server has been mapped Exporting a Key/Certificate from a ServerApache Interface to Open SSL§ modssl Apache SSL§ Stronghold§ Importing into the 7110/7115Intel 7115 import key mywebserver Save the configuration when the server has been mapped Create a key as follows Enter the create cert command with the keyIDCreating a new Key/Certificate on the 7110/7115 Intel 7115 create cert mywebserver Global Site Certificates Overview Global Site Certificate Paste Procedure ExampleIntel 7115 import cert keyID A P T E R Redirection Clients and Unsupported Ciphers Intel 7115 set redirect Intel 7115 show redirect Client AuthenticationTo disable a redirect URL for a mapping Intel 7115 set redirect 2 none Intel 7115 show redirect Next, import the client CA certificate for Map ID Intel 7115 import clientca Creating a Client CA Certificate using OpenSSL§ Generate the client CA certificateGenerate a certificate signing request SSL Processing MappingAutomapping Deleting automapping entries Automapping with user-specified key and certificateAutomapping with multiple port combinations Manual mapping Use the show block command to verify Combining automapping and manual mapping Subnet IP, Specific Port All IPs, Specific PortUse show block to verify Use the show block command to confirm the block Delete a BlockIntel 7115 delete block Failure Conditions, Fail-safe, and Fail-through Scenarios Syntax Procedure for Scenario Manual ConfigurationScenario 1-Single Server Intel 7115delete map 1 Intel 7115list maps This scenario shows how to configure two or more servers Scenario 2-Multiple Servers ID KeyID Scenario 3-Multiple 7110/ 7115s, Cascaded Assumptions Intel 7115 export config Multiple Cascaded 7110/7115s Save the configuration Intel 7115 import configAfter verification y or refusal n, the prompt reappears To reverse this process Intel 7115set egressmac none Command Reference Online Help Command Line Prompt Command Line InterfaceUser Authentication Abbreviation to Uniqueness A P T E R Command Line Interface Input Editing Commands Command HistoryMoving the Insertion Point Cut and Paste Command Summary Command Command Options Import Nic Password RebootInline List Command Command Options Set Command Command Options Show Status SetsnmpShowsnmp Ttychar Command Reference Help CommandsStatus Command Delete key SSL CommandsCommand Description Create key Import key Command Description Export key Show keyList keys Import cert Command Description Create certDelete cert Export cert Displays all certificates Command Description Show certDisplay the expanded certificate including PEM format Set ciphers Command Description Set redirect Show redirectShow clientca Command Description Import clientca Delete clientcaCreate sign Command Description Delete sign Export signShow sign keyID Display the default certificate creation information Command Description Set defcertIssuer e-mail address. You can change all, some or none Field Set clienttmo Command Description Set kstrengthShow kstrength Show clienttmo Client request is rejected Command Description Set servertmoDisplays the currently specified server timeout value Show servertmo Delete block Port Mapping CommandsCommand Definition Create block Show block Command Definition Create permit Delete permitShow permit Show map Command Definition Create mapDelete map mapID List maps Operational Commands Command Description BypassInline Command Description Set spill Show spill Remote Management Commands Command Description Set ipMaxremotesessions Command Description Set telnet Show telnetSet telnetport Show ssh Command Description Show telnetportSet ssh Set sshport Command Description Setsnmp snmp Showsnmp snmpSetsnmp snmpinfo CommandDescription SnmpcommunityDelete Snmp community strings Command Description Setsnmp trapauthen TrapcommunityList trapcommunity Delete trapcommunity Delete Snmp trap community strings Intel 7115 delete trapcommunity Show alarms Alarms and Monitoring CommandsCommand Description Set alarms Set rscwindow Command Description Show rscwindow Set utlwindowSet utlhighwater Show utlhighwater Command Description Set utllowwaterShow utlwindow Show utllowwater CommandDescription Show ovlwindow Intel 7115 show ovlwindow Configuration Commands Command Description Show configDisplay current volatile configuration settings Intel 7115 show config default Default configuration Config default Command Description Config compareConfig reset Config save Import config Command Description Export configConfiguration specifics are displayed Import a configuration file paste, xmodem, uudecode Command Description Import upgrade Import patchList system Command Description Factorydefault Returns to factory configuration settings Show info Administration CommandsCommand Description Password Set date Show ether Command Description Set egressmacSet ether Set idleto Set prompt Command Description Set moreNic Set serial Command Description Logging CommandsCommand Description Show serial Exit All deletes all logs Command Description Delete logDelete saved log/trace files from /flash/logs List logs Remote Management Overview Remote Management CLI Commands Limitations A P T E R Overview Remote Telnet Sessions Local Serial Console To display the Telnet port Remote Console, TelnetChanging the Telnet Port Unix-prompttelnet Remote SSh Sessions To verify Telnet disableEnable remote SSh sessions Disabling Telnet Remote Console, SSh Unix-promptssh -1 adminPasswordpassword Changing the SSh Port Disabling SSh To verify SSh disableIntel 7115 set ssh disable To display the SSh port Standards Compliance Intel MIB Tree Management Information Base-II MIB-II Intel Enterprise MIBs Where to find MIB FilesSupported MIBs Ceo-header.my Enterprise Private MIB Summary Following is a summary of the 7110/7115 private MIBPage Snmp ThrottlesPerSec Number of throttles per second Snmp Trap Summary Standard Snmp TrapsPrivate Traps in ssl-appliance-mib.my Intel 7115 setsnmp snmp enable Intel 7115 showsnmp snmp Intel 7115 setsnmp snmp disable Intel 7115 showsnmp snmpEnabling Snmp Specifying Snmp Information Intel 7115 showsnmp snmpinfo Community String Intel 7115 delete snmpcommunity Use CLI commands, setsnmp trapcommunity, list Trap Community String Access Control Page Alarms Monitoring CLI commands for alarm configuration are Set alarms All, esc, rsc, utl, ovl, nls None Show alarms Alarm Modifiers and Messages Alarm TypesESC Encryption Status Change Alarm For example RSC Refused SSL Connections RSC Alarm CLI CommandsTo set Overload Alarm time window Extended Data This alarm monitors three utilization threshold values UTL Utilization Threshold AlarmTo display Overload Alarm time window Intel 7115 set rscwindow Intel 7115 show rscwindow To set Utilization Threshold Alarm high-water value UTL Alarm CLI commandsTo set Utilization Threshold Alarm time window To set Utilization Threshold Alarm low-water value Intel 7115 set ovlwindow seconds Range OVL Overload AlarmOVL Alarm CLI Commands Intel 7115 set ovlwindow Intel 7115 show ovlwindow Alarm Logging NLS Network Link Status Alarm Intel 7115 status Respend Inline Ip 10.1.11.34 netmask Example, status alarms command Intel 7115 status alarms Monitoring Reports Report ConfigurationMonitoring Monitor report format Monitoring Reports CLI Commands Intel 7115 set monitoringfields Intel 7115 set monitoring enable Intel 7115 show monitoring Intel 7115 show monitoringfieldsPage Software Updates Using Windows§ HyperTerminal§ Press y for yes at the Continue with upgrade? promptIntel 7115 import upgrade Command import patch Connect the serial cable to the 7110/7115 auxiliary console To send the uuencoded file use the ~ command Intel 7115import upgrade Intel 7115import patch Page Troubleshooting Intel 7115 set clienttmo Error message Intermediate See Global Site Certificates Then use the nic command to force Error message ServerSettings Different media Front Panel LEDs Front Panel LEDs Buttons and SwitchesPress to physically force bypass mode bypass 7110/7115 Processing See Appendix B, Failure Overload Connectors Enable 7110/7115 processing Failure/Bypass Modes Fail-through Switch Security Level Bypass Button P E N D I X B Fail-through Switch Security Level Page Supported Ciphers Cipher Strength SSL Version Level RC4-64 SSLv2 RC2 SSLv2RC2128 RC464Page Regulatory Information Taiwan Class a EMI Statement Vcci Statement FCC Part 15 Compliance Statement Canada Compliance Statement Industry Canada CE Compliance Statement Cispr 22 Statement Vcci Class a Japan Australia Avertissement Warnung Advertencias Wichtige Sicherheitshinweise Wichtige Sicherheitshinweise Page Terms and Conditions and Software License END User Terms and Conditions of Sale and Software LicensePage P E N D I X E Page Year warranty Process of being installed Export Law Regulations Page Glossary Glossary-2 Glossary-3 Glossary-4 North America only Support ServicesWorldwide Access to Technical Support Japan only Support-2 Intel NetStructure 7110/7115 e-Commerce Accelerator User Support-4 Index D E Index-3 Index-4