Sun Microsystems CP3240 manual Secure Remote Access, Snmp Defaults, SSH and SSL/TLS Keys

4.10.3.3SNMP Defaults

SNMP is enabled by default. The default read-only community string is public. The default read-write community string is private.

4.10.4Secure Remote Access

4.10.4.1SSH and SSL/TLS Keys

The switch supports SSH for a secure CLI console as well as SSL/TLS for secure HTTP. By default, SSH and SSL are disabled. The switch cannot generate its own keys. Keys must be generated on an external PC, and uploaded to the switch via TFTP. Once the keys are on the switch, SSH and HTTPS must be enabled to be used.

4.10.4.2Enabling SSH and SSL

First, the certifications and keys must be uploaded to the switch using a command such as the following:

copy tftp://<ip>/<file> <location>

Upload the following files to the switch:.

FileLocation

rsa1.key nvram:sshkey-rsa1

rsa2.key nvram:sshkey-rsa2

dsa.key nvram:sshkey-dsa

dh512.pem nvram:sslpem-dhweak

dh1024.pem nvram:sslpem-dhstrong

server.pem nvram:sslpem-server rootcert.pem nvram:sslpem-root

Enable secure access (SSH/Telnet) and disable non-secure access (SSL/HTTP).

ip ssh configure

Chapter 4 Configuring Switch Software 4-21