Enabling and Restricting SSH Access

138The Command Line Interface

telnet <IP address>

You will then be prompted to enter a valid user name and password. For more information about different user accounts and default passwords, see “Accessing the NVG Cluster” (page 140).

Establishing a Connection Using SSH (Secure Shell)

When accessing the VPN Gateway from a workstation connected to the network using a Telnet connection, it is important to keep in mind that the communication channel is not secure. All data flowing back and forth between the Telnet client and the VPN Gateway is sent unencrypted (including the password), and there is no server host authentication.

By using an SSH client to establish a connection over the network, the following benefits are achieved:

•Server host authentication

•Encryption of passwords for user authentication

•Encryption of all traffic that is transmitted over the network when configuring or collecting information from the VPN Gateway

SSH access to the VPN Gateway is disabled by default. However, depending on the severity of your security policy, you may want to enable SSH access. You may also restrict SSH access to one or more specific machines.

For more information about how to enable SSH access, see the ssh command in the "Administrative Applications Configuration " section under Configuration Menu>System Configuration in the Command Reference. For more information about how to restrict SSH access to one or more specific machines, see the add command in the "System Access Configuration " section in the same chapter.

Running an SSH Client

Connecting to the VPN Gateway using a SSH client is similar to connecting through Telnet. As with Telnet, the IP parameters on the VPN Gateway need to be configured in advance and SSH access must be enabled. After providing a valid user name and password, the command line interface in the VPN Gateway is accessible the same way as when using a Telnet client. However, because a secured and encrypted communication channel is set up even before the user name and password is transmitted, all traffic sent over the network while

Nortel VPN Gateway

User Guide

NN46120-104 02.01 Standard

14 April 2008

NN46120-104 specifications

Nortel Networks NN46120-104 is a versatile and efficient telecommunications hardware platform designed to meet the demands of modern networking environments. As a part of Nortel’s extensive portfolio, this device showcases the company’s commitment to innovation and reliability in the telecom sector.

One of the main features of the NN46120-104 is its robust performance capabilities. This platform is capable of handling high traffic volumes, making it suitable for medium to large enterprises. With its advanced routing capabilities and support for various protocols, the device ensures seamless communication across multiple network segments, providing efficient data transfer and connectivity.

The NN46120-104 is built upon the foundation of Nortel's renowned Layer 3 switching technology. This allows it to intelligently direct data packets based on their IP addresses, optimizing both speed and reliability. The inclusion of Virtual LAN (VLAN) support enhances network segmentation, improving security and management while reducing broadcast domains.

In terms of interface options, the NN46120-104 supports an array of Ethernet configurations, including Gigabit and Fast Ethernet ports. This flexibility allows organizations to tailor their networking solutions to their specific needs while enabling easy upgrades as technology evolves. The device also supports Power over Ethernet (PoE), facilitating the deployment of powered devices like IP phones and wireless access points without the need for additional power sources.

Another significant characteristic of the NN46120-104 is its robustness in terms of security features. With support for advanced security protocols and features such as Access Control Lists (ACLs), the device helps safeguard sensitive data by controlling traffic flow and restricting unauthorized access.

Additionally, the NN46120-104 is designed for ease of management. It offers an intuitive interface and supports various management protocols, including Simple Network Management Protocol (SNMP), enabling administrators to monitor and configure the device efficiently.

In summary, the Nortel Networks NN46120-104 combines high performance, extensive connectivity options, advanced security features, and ease of management, making it a formidable choice for enterprises looking to enhance their network infrastructure. Its capabilities align well with the rigorous demands of today’s digital communication landscape, ensuring reliability and efficiency in organizational operations.

Nortel Networks NN46120-104 Establishing a Connection Using SSH Secure Shell, Telnet IP address

Models: NN46120-104

telnet <IP address>

Establishing a Connection Using SSH (Secure Shell)