NEC N8406-022A Secure Shell Server configuration

Secure Shell Server configuration

Command: /cfg/sys/sshd

[SSHD Menu]
interval–		Set Interval for generating the RSA server key
scpadm	–	Set SCP-only admin password
hkeygen -		Generate	the RSA host key
skeygen -		Generate	the RSA server key
sshport	-	Set SSH server port number
ena	-	Enable the SCP apply and save
dis	-	Disable the SCP apply and save
on	-	Turn SSH	server ON
off	-	Turn SSH	server OFF
cur	-	Display current SSH server configuration

Telnet traffic on the network is not secure. This menu enables Secure Shell (SSH) access from any SSH client. The SSH program securely logs into another computer over a network and executes commands in a secure environment. All data using SSH is encrypted.

Secure Shell can be configured on the switch using the console port only. The menu options do not display if you access the switch using Telnet or the Browser-based Interface (BBI).

NOTE: See the Application Guide for information on SSH.

The following table describes the SSHD Configuration Menu options.

Table 60 SSHD Configuration Menu options

Command	Description
intrval <0-24>	Defines interval for auto-generating the RSA server key. The switch will
	auto-generate the RSA server key at the interval defined in this
	command. The value of zero (0) means the RSA server key auto-
	generation is disabled. If the switch has been busy performing any other
	key generation and the assigned time of interval expires, the RSA
	server will skip generating the key.
scpadm	Defines the administrator password that is for Secure Copy (SCP) only.
	The username for this SCP administrator is scpadmin.
	Typically, SCP is used to copy files securely from one machine to
	another. In the switch, SCP is used to download and upload the switch
	configuration using secure channels.
hkeygen	Generates the RSA host keys manually. The switch creates this key
	automatically while configuring the switch with Secure Shell (SSH). But
	you can generate the key manually by using this command if you need
	to overwrite the key for security reasons. The command will take effect
	immediately without executing the apply command.
skeygen	Generates the RSA server key. The switch creates this key
	automatically while configuring the switch with Secure Shell (SSH). You
	can generate the key manually by using this command if you need to
	overwrite the key for security reasons. The command will take effect
	immediately without executing the apply command.
sshport <TCP port number>	Sets the SSH server port number. The default is 22.
ena	Enables the SCP apply and save.
dis	Disables the SCP apply and save. This is the default for SCP.
on	Enables the SSH server.
off	Disables the SSH server. This is the default for the SSH server.
cur	Displays the current SSH server configuration.

Command Line Interface 64