Secure Shell, SSH Version, SSH Connections in Use | Intel IXM5414E

Secure Shell

Secure Shell (SSH) is the standard encryption protocol used to provide a secure interactive login over a network. This Secure Shell menu provides access to the SSH configuration panel.

Configuration

Use this panel to configure SSH variables.

Admin Mode

Select Enable or Disable to turn the Administrative Mode of SSH on or off. The currently configured value is shown when the web page is displayed. The default value is Disable.

SSH Version 1

Select Enable or Disable to turn Protocol Level 1 for SSH on or off. The currently configured value is shown when the web page is displayed. The default value is Enable. Either SSH Version 1 or Version 2 must be Enabled at all times.

SSH Version 2

Select Enable or Disable to turn Protocol Level 2 for SSH on or off. The currently configured value is shown when the web page is displayed. The default value is Enable. Either SSH Version 1 or Version 2 must be Enabled at all times.

SSH Connections in Use

Displays the number of SSH connections currently in use in the system.

Click the Download Host Keys button to link to the File Transfer page to download the Host Key(s).

/NOTE

To download SSH key files SSH must be administratively Disabled and there can be no active SSH sessions

136	Intel® Blade Server Ethernet Switch Module IXM5414E

Image 146

Intel IXM5414E manual Secure Shell, SSH Version, SSH Connections in Use, 136

Contents

C66107-004 Page Contents Page Safety To Connect To Disconnect Statement Vii Viii XxCAUTION Page Page Related publications Major components of the IXM5414E switch module Ports Specifications and featuresPerformance features Standards Garp Gmrp Gvrp Management Intel Blade Server Ethernet Switch Module IXM5414E Network Cable Support Ethernet interface requirements System reliability considerations Installation guidelinesModule Bay Switch-module function Handling static-sensitive devices Installing the IXM5414E switch module Sbce Intel Blade Server Ethernet Switch Module IXM5414E Removing the IXM5414E switch module Intel Blade Server Ethernet Switch Module IXM5414E Intel Blade Server Ethernet Switch Module IXM5414E Information panel LEDs Intel Blade Server Ethernet Switch Module IXM5414E Intel Blade Server Ethernet Switch Module IXM5414E overview Chassis configuration and operation Switch module management and control Module bay number Default IP address IP addresses and Snmp community names Traps Port mirroring Authentication failureManagement Information Bases MIB Topology change Spanning Tree Protocol STP Simple Network Management Protocol Snmp Switching conceptsAuthentication Packet forwarding Spanning Tree Protocol STP Virtual Local Area Networks Vlan Ieee 802.1Q VLANs Ieee 802.1Q Vlan packet forwarding Forwarding rules between ports Ieee 802.1Q Vlan tags Ieee 802.1Q Tag Egress rules Port Vlan IDTagging and untagging Generic Attribute Registration Protocol Garp Ieee 802.1Q Vlan configurationStatic MAC filtering Garp Multicast Registration Protocol Gmrp Group Service Requirements InformationGarp Vlan Registration Protocol Gvrp Group Membership Information Internet Group Management Protocol Igmp snooping Static LAGs Distribution method Dynamic Host Configuration Protocol Dhcp Security AuthenticatorAuthentication server Ieee Secure Shell SSH Radius authenticationLocal authentication SSL Feature Component Type Secure Socket Layer SSL Bandwidth Allocation Profile Quality of Service QoSBandwidth provisioning Access Control Lists ACL Intel Blade Server Ethernet Switch Module IXM5414E Remotely managing the switch module Introduction Getting started Intel Blade Server Ethernet Switch Module IXM5414E QOS System MAC Address ARP cacheInventory information Machine Type Maintenance LevelSystem Description Machine Model Operating System ConfigurationSystem description Network Processing Device Network connectivity Burned In MAC Address Default GatewayNetwork Configuration Protocol User accounts Telnet Login Timeout minutesTelnet Maximum Number of Telnet Sessions Snmp v3 Access Mode PasswordConfirm Password User Encryption Protocol Login configurationAuthentication Protocol Encryption Key Login session Connection From Login summaryID of this row Method List User loginLogin Users 802.1X Port Security Users Authentication is complete Search ConfigurationForwarding database Aging Interval secs MAC Address Search FilterLearned IfIndex Gmrp Learned LogsMessage log Other Days, hours, minutes and seconds Event logTime Filename PortEntry TaskID Probe Lacp Mode Admin ModeFlow Control Mode Physical Mode Summary Forwarding State STP ModePort Type Link Status Control ModeMirroring Link Trap Port Mirroring Mode Port to be Mirrored Name Community configurationCommunity Client IP Mask Trap receiver configurationClient IP Address Trap receiver summary Supported Management Information Bases MIB EnableDisable IP Address Description RFC title or MIB description Switch detailedStatistics Unicast Packets Received Packets Received Without ErrorOctets Received Multicast Packets Received Unicast Packets Transmitted Packets Transmitted Without ErrorsOctets Transmitted Multicast Packets Transmitted Packets Received With Error Switch summaryTotal Packets Received Without Errors Address Entries Currently In Use Transmit Packet ErrorsPort detailed Vlan Entries Currently In Use Packets Received 65-127 Octets Total Packets Received with MAC ErrorsPackets Received 64 Octets Packets Received 128-255 Octets Jabbers Received Alignment ErrorsRx FCS Errors Fragments/Undersize Received Underrun Errors Total Transmit ErrorsTx FCS Errors Packets Transmitted 1024-1518 Octets STP BPDUs Transmitted Excessive Collision FramesSTP BPDUs Received Rstp BPDUs Received Port summary Collision Frames Save all applied changes System resetSystem utilities Reset configuration to defaults Reset passwords to defaults Download file to switch Tftp File Path File TypeTftp Server IP Address Tftp File Name Upload file from switch Trap flags Trap managerPing Ping Link Up/Down AuthenticationTrap log Multiple Users Switching Vlan ID and Name Vlan Name Broadcast Packets/Second Broadcast Storm Control ModeMulitcast Storm Control Mode Multicast Packets/Second Status Tagged All frames transmitted for this Vlan will be tagged Port Vlan ID Port configurationMulticast Storm Control Mode Acceptable Frame Types All. The factory default is Filters Reset configurationMAC filter configuration MAC filter summary Destination Port Mask Destination Port Members Switch GvrpSwitch Gmrp Switch configuration 100 101 Gvrp ModeGmrp Mode 102 Group Membership Interval secs Configuration and statusIgmp snooping Max Response Time secs Less Than Group Membership Interval Interface configuration 104 LAG Name Administrative ModeLAG Name Create 105 106 Membership ConflictsLogical port identifier of the LAG, in the format lag.port 107 Mfdb tableMember Ports Type Gmrp tableComponent Forwarding Ports Igmp snooping table 109 Stats Switch configuration/statusSpanning tree 110 Configuration Digest Key Common Spanning Tree CST configuration/statusSpanning Tree Admin Mode Force Protocol Version 112 CST port configuration/status 113 114 Rstp BPDUs. Transmitted Class of serviceStatistics 115 User Priority Port access control802.1p priority mapping Traffic Class 117 Quiet Period secs Force UnauthorizedForce Authorized 118 Port status 119 120 Protocol Version Authenticator PAE StateControl Direction PAE Capabilities Backend State 122 123 Operating Control ModeKey Transmission Enabled 124 Login 125 126 Port access privilegesPort access summary Radius 127 Server configuration 128 129 Invalid Server Addresses Radius statisticsServer statistics 130 131 Accounting server configuration 132 Accounting Retransmissions Accounting server statisticsAccounting Requests Accounting Responses Clear statistics TimeoutsSecure Http Malformed Accounting Responses SSL Version Https Admin ModeTLS Version Https Port SSH Connections in Use Secure ShellSSH Version 136 137 Access Control ListsQoS 138 DirectionCurrent Size/Max Size 139 Rule configurationACL identifier 140 RuleAction 141 Destination L4 Port Keyword Destination L4 Port Number Bandwidth profile configurationSource L4 Port Keyword Source L4 Port Number 142 Maximum Bandwidth Bandwidth profile summaryBandwidth Profile 143 144 Traffic class configurationAllocated Minimum Bandwidth 145 WeightInterface 146 Traffic class summaryAccept Byte Count 147 LogoutInterface allocation summary 148 Determining the software version 149 Upgrading the MCU code using Telnet Upgrading the switch softwareUpgrading the image using Telnet Obtaining the latest version Upgrading the image using web interface 151 152 Resetting and restarting the switch moduleUpgrading the MCU code using web interface 153 154 Format Command Line Interface CLI conventionsCommand name 155 156 ParametersValues 157 CommentsSpecial characters Execute the nth command in history buffer Remotely managing the IXM5414E switch moduleConnecting to the IXM5414E switch module Str Changing configuration settings 159 Managing user accounts IXM5414E switch module system commandsInitial configuration 160 Forwarding DB System commandsAddress Resolution Protocol ARP cache 162 Inventory informationShow inventory Port commands Logs 164 Default disable FormatAcceptable values are 165 FlowControl ModeMirroring commands 166 Snmp community commandsSimple Network Management Protocol Snmp Format show snmpcommunity Snmp Community Name 167 Format show snmptrap Snmp Trap Name Status Status of this community. Either enable or disableSnmp trap commands 168 Format Config network protocol none/bootp/dhcp Values System configurationDefault 10.90.90.9x 255.255.255.0 Format Network connectivity 170 Format Show network IP AddressTelnet 171 Format show telnet Telnet Login Timeout minutesUser accounts Default No encryption Format Format Config users passwd userDefault No authentication Format Use of zero instead of the letter O 173 LoginConfig prompt Config sysname Config syscontactConfig syslocation Show stats port detailed 175 Total Packets Received Without ErrorFragments/Undersized Received 176 BPDUs Transmitted Total Transmit Packet DiscardedBPDUs Received Gvrp PDUs Failed Registrations 178 Show stats switch detailedShow stats port summary 179 Show stats switch summary 180 Show sysinfo System utility commandsSystem utilities 181 Format logout 182 183 Transfer download commandsDefault code Format Tftp Filename Transfer upload commandsTftp Server IP 184 185 Trap manager 187 Switching configuration commandsShow traplog Generic Attribute Registration Protocol Garp commands Show garp interface Config garp leavetimerShow garp info 189 Config igmpsnooping groupmembershipinterval Igmp snooping commandsConfig igmpsnooping adminmode Config igmpsnooping interfacemode Config lag addport Link Aggregation LAG commandsConfig igmpsnooping mcrtrexpiretime Config lag adminmode Config lag deleteport Config lag createConfig lag deletelag Config lag linktrap Config macfilter create MAC filter commandsConfig macfilter adddest Config macfilter deldest Show mfdb gmrp Multicast Forwarding Database Mfdb commandsShow macfilter Show mfdb igmpsnooping Show mfdb table Show mfdb staticfilteringShow mfdb stats 195 Spanning tree commands Spanning tree bridge commands Spanning tree Common Spanning Tree CST commands Show spanningtree cst port detailed 198 Show spanningtree cst port summary 199 Spanning tree port commands Spanning tree summary commands Virtual Local Area Network Vlan commands Config vlan port acceptframe Config vlan nameConfig vlan participation Config vlan port priority 203 Config vlan port taggingShow vlan detailed 204 Show vlan portShow vlan summary Show classofservice 802.1pmapping Class of Service commandsConfig classofservice 802.1pmapping Default = see table below Security configuration commands Authentication commands Ieee 802.1X commands Config dot1x login Config dot1x adminmodeConfig dot1x defaultlogin Config dot1x port controlmode Config dot1x port reauthenticate Config dot1x port quietperiodConfig dot1x port reauthenabled Config dot1x port reauthperiod Config dot1x port users remove Config dot1x port transmitperiodConfig dot1x port users add Show dot1x port detailed 211 Show dot1x port statsFormat Show dot1x port stats port Port Show dot1x summary Show dot1x port summaryShow dot1x port users 212 Remote Authentication Dial-In User Service Radius commands Radius accounting commands Show radius accounting summary Radius configuration / summary commandsConfig radius maxretransmit Clear radius stats Show radius summary Config radius timeoutShow radius stats 215 Radius server commands 217 Server IP AddressShow radius server summary Secure Shell SSH commands Secure Socket Layer SSL commands Quality of Service QoS commands Access Control List ACL commands Config acl rule delete Config acl rule actionConfig acl rule create Config acl rule match dstip Config acl rule match protocol number Config acl rule match everyConfig acl rule match protocol keyword Config acl rule match srcip Show acl summary Config acl rule match srcl4port numberShow acl detailed 222 Bandwidth provisioning commands BW provisioning BW allocation commands BW provisioning traffic class commands Show bwprovisioning trafficclass summary Show bwprovisioning trafficclass allocatedbwShow bwprovisioning trafficclass detailed 225 226 Contact pin number Label Media direct interface signal 227 228 229 Standard Data transmission rate Media type Maximum distance 230 Ieee 231Bandwidth Provisioning 232 Remote Authentication Dial-in User ServiceVlan Switching Secure Shell Igmp Snooping Heading233 Spannng Tree Protocol STP 234Link Aggregation 235 User Accounts 236Telnet Utilities 237 238 Appendix D CLI Command Tree 239 240 241 242 243 Spanningtree Show 244 245 Transfer 246 247 248 249 Bridging configuration exampleConfig spanningtree bridge priority Config forwardingdb agetime 250 Config spanningtree forceversion 802.1d Ieee 802.1w configuration exampleConfig spanningtree forceversion 802.1w 251 Config vlan port pvid 2 bay.3,bay.4 Vlan configuration exampleConfig vlan create 252 Link aggregation configuration example 253 Config igmpsnooping mcrtrexpiretime Igmp snooping configuration exampleConfig igmpsnooping adminmode enable Show mfdb table all Config acl rule create 1 Access Control List configuration exampleConfig acl create Config acl interface add ext.1 inbound Config acl interface add ext.4 inbound 256 257 Parameter Description Default valueSpanning Tree Protocol STP operation 258 Variable Description Default valueCreating a stable topology Ieee 802.1D STP port states 259 Port state Ieee 802.1w STP port states260 Role Feature Default value Setting user-changeable STP parametersForward Delay 261 Illustration of STP 262 This example, only the default STP values are used 263 Discarding state 264 Learning state 265 Forwarding state 266 267 Disabled state 268 Full/half duplex mismatch Troubleshooting STPSpanning Tree Protocol Failure 269 Unidirectional link 270 Identifying a data loop Resource errorsPacket corruption 271 Avoiding network problems 272 273 274 Before you call 275 276 Safety and regulatory information 277 278 General SafetyElectrical Safety Handling electrostatic discharge-sensitive devices 279 280 Regulatory specifications and disclaimersSafety compliance 281 Electromagnetic compatibility EMCJapan EMC Compatibility RRL Korea 282 Device English translation of the previous notice283 User’s Information 284