Lantronix XPort AR specification

8: SSH and SSL Security

Alternatively, it can be automatically generated on the device; this certificate type is a self-signed certificate.

Note: When uploading the certificate and the private key, ensure the private key is not compromised in transit.

To upload a new certificate, see Upload Certificate on page 46. To create a new self- signed certificate, see Create New Self-Signed Certificate on page 47.

XPort AR User Guide

127

Page 127

Image 127

Contents

XPort AR User Guide Technical Support Lantronix Corporate HeadquartersSales Offices Contents Contents Configuration Using Telnet or Serial Port Using Email 128 Figures Tables Purpose and Audience Using This GuideSummary of Chapters Guide Additional Documentation Features Description and SpecificationsApplications Configuration Methods Additional FeaturesProtocol Support Port Numbers Addresses and Port NumbersHardware Address IP Address Product Label Product Information Label Accessing XPort AR using DeviceInstaller Using DeviceInstallerViewing the XPort AR’s Current Configuration Supports Configurable Telnet EnabledWeb Enabled Firmware Upgradeable Accessing Web Manager through a Web Browser Configuration Using Web ManagerTo access Web Manager Network Configuration Network SettingsTo configure the network’s general configuration To configure the XPort AR’s network stack protocols Protocol Stack Configuration Send RSTs ARP Timeout Clear Remove To configure the XPort AR’s PPP configuration To configure Snmp DNS ConfigurationSnmp Configuration To configure the XPort AR’s DNS configuration To configure FTP FTP Configuration To configure Tftp Tftp Configuration Tftp Server To configure the IP address filterIP Address Filter Query Port To configure Line Line 1, Line 2, and Line 3 SettingsLine 1 Configuration To configure the query port server To configure Line 1’s command mode Line 1 Command Mode Tunnel 1 and Tunnel 2 Settings To configure serial settings Serial Settings Wait for Read Timeout Connect ModeTo configure Tunnel 1’s connect mode Read Timeout To configure the tunnel’s accept mode Accept Mode Flush Serial Data 16. Tunnel 1 Accept Mode Timeout Disconnect ModePacking Mode To configure the tunnel’s disconnect mode To configure the start and stop characters mode To configure the tunnel’s packing modeStart and Stop Characters Modem Emulation To configure modem emulation To configure the AES keys for connect mode AES Keys Connect Mode Decrypt Key AES Keys Accept ModeTo configure the AES keys for accept mode Encrypt Key CPM Configurable Pins Configurable Pin ManagerTo configure the XPort AR’s CPs Groups Configured AsPin # State CPM Groups To configure the XPort AR’s CP groupsName State Displays the CP group’s current value To configure the SSH server’s host keys SSH SettingsSSH Server’s Host Keys Public RSA Key To configure the SSH server’s authorized usersSSH Server’s Authorized Users Bit Size SSH Client Known Hosts SSH Client User ConfigurationTo configure the SSH client’s known hosts To configure the SSH client’s users Private Key Remote CommandPublic Key Key SSL SettingsTo configure the XPort AR’s SSL settings New Certificate CLI Configuration Command Line Interface SettingsTo configure the CLI To view Http statistics Http Settings To configure Http Http Configuration To configure Http authentication settings Http Authentication Auth Type Realm To import and apply an XML configuration XML ConfigurationImport System Configuration To configure Http RSS settings Gigi … To export and store an XPort AR’s configuration Export System Configuration To configure XPort AR’s email settings Email Configuration Filesystem Configuration To browse the XPort AR’s filesystem To compact or format the XPort AR’s filesystem Source Mode Select Ascii or Binary Local FileDirectory Browse To view XPort AR’s MIB2 statistics Diagnostics ConfigurationMIB2 Statistics IP Sockets Ping Host Count TimeoutTo ping a remote device or computer To use forward or reverse DNS lookup TracerouteDNS Lookup To use traceroute from the XPort AR To display the XPort AR’s buffer pools MemoryBuffer Pools To display memory statistics for the XPort AR Processes 48. Diagnostics Buffer Pools CPU Speed System ConfigurationTo display the XPort AR’s hardware diagnostics Hardware Upload New Firmware To configure the XPort AR’s system settingsReboot Device Restore Factory Defaults Using the Serial Port Configuration Using Telnet or Serial PortAccessing Command Mode Using Telnet To return to the next level up in the menu hierarchy Navigating the Command Line InterfaceTo view the current configuration at any level To view the available commands and their explanation XPort AR CLI Level Hierarchy Root Configuration Menu Enable Menu Clear ssh session ConfigureDisable Clear query port counters No clear query port counters Reload factory defaultsLine3 No clear interfaces counters Show processes Show hostsShow interfaces Show ip sockets Chem Menu CP send cp group value Cc email addressClear log Clear mail counters No file No ccNo clear mail counters No cp send Send Priority urgentPriority very low Replyto email address Configure Menu Clear ip telnet counters Enable passwordClear ip counters Clear ip ssh counters Ip domain name string Ip ftp enableIp ftp password string Hostname string IP http auth type uri ssl-digest IP http auth user uri user passwordIP http max timeout seconds IP http auth type uri ssl-basic Ip telnet enable IP icmp enableIp ssh enable Ip tcp resets enable No clear ip ssh counters No ip ftp enableNo ip ftp password No clear ftp counters No ip telnet enable No ip icmp enableNo ip ssh enable No ip tcp resets enable No rss persistent No rss enableNo snmp-server enable No snmp-server enable traps Ppp PasswordPassword string Query-port enable Show snmp-server Snmp-server enableShow ip Show rss Interface 1 Level Menu IP address ip address/bits IP default-gateway ip addressNo bootp Dhcp renew Speed 10 full No ip default-gatewayShow ip address filter Speed PPP Menu CPM Menu Set group value Disable groupEnable group Get group Device Menu Show memory Short name nameShow buffer pool Show hardware information Filesystem Menu Ls directory Cp source file destination fileDump file Format Tftp get binary source file destination file host Show treeTftp get ascii source file destination file host Tftp get ascii source file destination file host port Line Menu Command mode signon message string Command mode serial stringCommand mode serial string string Command mode serial string binary string No command mode serial string No command modeNo command mode echo No command mode cp Shutdown Show command modeParity odd Show line SSH Menu Host generate dsa HostHost key Host public private No client server server Host user user passwordHost user user password key Host user user password public private SSL Menu Tunnel Menu Accept cp set group group Accept any characterAccept block network Accept block serial Clear aggregate counters Accept protocol telnetAccept start character Clear accept counters Connect cp set group group Connect any characterConnect block network Connect block serial Connect protocol tcp aes Connect reconnect timer millisecondsConnect protocol ssh Connect protocol tcp Disconnect stop character Disconnect timeoutDisconnect timeout number Modem echo commands Modem text response codes Modem error unknown commandsModem echo pluses Modem numeric response codes No clear aggregate counters No accept keep aliveNo accept port No clear accept counters No connect port No modem echo commandsNo connect flush serial data No connect keep alive Packing mode timeout No packing modeNo serial wait for read timeout Packing mode send character Packing threshold bytes Packing timeout millisecondsSerial read timeout milliseconds Serial wait for read timeout milliseconds Write Point-to-Point Protocol PPP Tunneling Connect Mode Accept Mode Packing Mode Disconnect Mode Modem Emulation Command Mode Statistics Serial Line Settings Secure Shell SSH SSH Server ConfigurationTo configure SSH server settings SSH and SSL Security To configure SSH client settings SSH Client ConfigurationSecure Sockets Layer SSL Page Smtp Configuration Using Email Email Statistics Priority LevelsDNS Records Extended HelloPage Type show cp Configuration Pin ManagerConfigurable Pins To view a CP’s configuration Type show group name To view a CP group’s configurationTo configure a group’s value CP GroupsPage 11 XML XML Configuration Record Schema XML Group Example XPort AR’s schema or template, is structured as following XML Example With Multiple Named Values Configuration using XML XML Groups Configure an XPort AR with XML using the following stepsImport-Only Groups XPort AR Import and Export Groups XPort AR User Guide 139 XPort AR User Guide 140 XPort AR User Guide 141 XPort AR User Guide 142 XPort AR User Guide 143 XPort AR User Guide 144 XPort AR User Guide 145 XPort AR User Guide 146 XPort AR User Guide 147 XPort AR User Guide 148 XPort AR User Guide 149 To change the XPort AR’s short and long names Command ModeBranding the XPort AR Web Manager Customization Obtaining Firmware Loading New Firmware Updating FirmwareTo upload new firmware Email eutechsupp@lantronix.com Technical Support Scientific Calculator Binary to Hexadecimal ConversionsConverting Binary to Hexadecimal Conversion Table Binary to Hexadecimal Conversions Radiated and conducted emissions RF Common Mode Conducted SusceptibilityPower Frequency Magnetic Field Immunity Manufacturer’s Name & Address Warranty

Lantronix XPort AR manual

Models: XPort AR