Chapter 5

Configuring the Switch

Security > SSH Settings

Security > SSH Settings

The Secure Shell (SSH) includes server/client applications that can provide remote management access to the Switch and act as a secure replacement for Telnet..

When the client contacts the Switch through the SSH protocol, the Switch generates a public-key that the client uses along with a local user name and password for access authentication.. SSH also encrypts all data transfers passing between the Switch and SSH-enabled management station clients, and ensures that data traveling over the network arrives unaltered..

NOTE: You need to install an SSH client on the management station to access the Switch for management through the SSH protocol.. The Switch supports both SSH Version 1..5 and 2..0..

SSH Server Status  Allows you to enable/disable the SSH server on the Switch.. (Default: Disabled)

Version  The Secure Shell version number.. Version 2..0 is displayed, but the Switch supports management access via either SSH Version 1..5 or 2..0 clients..

SSH Authentication Timeout (1-120)  Specifies the time interval in seconds that the SSH server waits for a response from a client during an authentication attempt.. (Default:

120seconds)

SSH Authentication Retries (1-5)  Specifies the number of authentication attempts that a client is allowed before authentication fails and the client has to restart the authentication process.. (Default: 3)

SSH Server-Key Size (512-896)  Specifies the SSH server key size.. The server key is a private key that is never shared outside the Switch.. The host key is shared with the SSH client, and is fixed at 1024 bits.. (Default:768)

Security > SSH Host-Key Settings

Security > SSH Host-Key Settings

A host public/private key pair is used to provide secure communications between an SSH client and the Switch.. After generating this key pair, you must provide the host public key to SSH clients and import the client’s public key to the Switch..

Public-Key of Host-Key The public key for the host..

RSA (Version 1)  The first field indicates the size of the host key (e..g.., 1024), the second field is the encoded public exponent (e..g.., 65537), and the last string is the encoded modulus..

DSA (Version 2)  The first field indicates that the encryption method used by SSH is based on the Digital Signature Standard (DSS).. The last string is the encoded modulus..

Host-Key Type  The key type used to generate the host key pair (i..e.., public and private keys).. (Range: RSA (Version 1), DSA (Version 2), Both: Default: RSA) The SSH server uses RSA or DSA for key exchange when the client first establishes a connection with the Switch, and then negotiates with the client to select either DES (56-bit) or 3DES (168-bit) for data encryption..

Save Host-Key from Memory to Flash  Saves the host key from RAM (volatile memory) to flash memory.. Otherwise, the host key pair is stored to RAM by default.. Note that you must select this item prior to generating the host-key pair..

24-Port 10/100 + 4-Port Gigabit Switch with WebView and Power over Ethernet

30

Page 34
Image 34
Linksys SRW224G4P manual Security SSH Settings, Security SSH Host-Key Settings