SSH Config, Select Enable/Disable SSH function | TP-Link TL-SG2008

4.It may take more time for https connection than that for http connection, because https connection involves authentication, encryption and decryption etc.

4.4.3 SSH Config

As stipulated by IFTF (Internet Engineering Task Force), SSH (Secure Shell) is a security protocol established on application and transport layers. SSH-encrypted-connection is similar to a telnet connection, but essentially the old telnet remote management method is not safe, because the password and data transmitted with plain-text can be easily intercepted. SSH can provide information security and powerful authentication when you log on to the switch remotely through an insecure network environment. It can encrypt all the transmission data and prevent the information in a remote management being leaked.

Comprising server and client, SSH has two versions, V1 and V2 which are not compatible with each other. In the communication, SSH server and client can auto-negotiate the SSH version and the encryption algorithm. After getting a successful negotiation, the client sends authentication request to the server for login, and then the two can communicate with each other after successful authentication. This switch supports SSH server and you can log on to the switch via SSH connection using SSH client software.

SSH key can be downloaded into the switch. If the key is successfully downloaded, the certificate authentication will be preferred for SSH access to the switch.

Choose the menu System→Access Security→SSH Config to load the following page.

Figure 4-17 SSH Config

The following entries are displayed on this screen:

¾Global Config

SSH:	Select Enable/Disable SSH function.

Protocol V1:Select Enable/Disable SSH V1 to be the supported protocol.

Protocol V2:Select Enable/Disable SSH V2 to be the supported protocol.

22

Image 29

TP-Link TL-SG2008 manual SSH Config, Select Enable/Disable SSH function

Contents

REV1.0.0 1910010984 TL-SG2008 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Intended Readers About this GuideConventions Overview of This Guide System Chapter Introduction Appendix a Specifications Main Features Overview of the SwitchIntroduction Appearance Description ¾ LEDs Name Status Indication Rear Panel Configuration Login to the SwitchLogin Return to Contents System Info SystemSystem Summary ¾ Port Status ¾ Port Info Device DescriptionStatus Displays the connection status of the port ¾ Bandwidth Utilization ¾ Time Info System Time¾ Device Description Daylight Saving Time System IP Following entries are displayed on this screen System IP User Table ¾ IP ConfigUser Management Password Type in a password for users’ login User Config¾ User Info User Status Confirm Password Password Display Mode Config RestoreUser ID, Name, Access Level and status Operation System Tools ¾ Config Backup Config BackupFirmware Upgrade System Reset System Reboot Access Control Access Security IP Address & Mask SSL ConfigMAC Address Port ¾ Certificate Download ¾ Global Config¾ Key Download Key File Select Enable/Disable SSH function SSH Config ¾ Network Requirements ¾ Configuration ProcedureDownload Application Example 2 for SSH Page Page Return to Contents Port SwitchingPort Config Group Port MirrorMirroring Mode Egress NumberIngress ¾ Port Security Port Security Port Isolation Port Isolation Loopback Detection ¾ Port Isolation Config¾ Port Isolation List Forward Portlist Display the forwardlist LAG Operation Mode ¾ LAG Table LAG Table Member Static LAGGroup Number LAG will delete this LAG Lacp Config Port Priority ¾ Lacp ConfigAdmin Key Traffic Summary Traffic MonitorPackets Rx Packets Tx Refresh Rate Traffic Statistics¾ Statistics Received Bound MAC address MAC AddressWay Port ¾ Search Option Address Table Static Address MAC Address Displays the MAC address learned by the switch¾ Address Table Displays the corresponding Vlan ID of the MAC address ¾ Static Address Table Dynamic Address Bind ¾ Aging Config¾ Dynamic Address Table ¾ Create Filtering Address Filtering Address ¾ Dhcp Working Principle Dhcp Filtering¾ Filtering Address Table 17 Network diagram of Dhcp ¾ Dhcp Cheating Attack 19 Dhcp Cheating Attack Implementation Procedure ¾ Trusted Port ¾ Dhcp FilteringDhcp Filtering Vlan ¾ Link Types of ports 802.1Q Vlan ¾ Pvid Vlan Config Name Give a name to the Vlan for identificationUntagged Ports Tagged Ports Application Example for 802.1Q Vlan ¾ Network DiagramUntagged Tagged Step Operation Description Required. On VLAN→802.1Q VLAN→VLAN Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a ¾ STP Elements Spanning Tree ¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Tips ： Step Operation ¾ Mstp Elements ¾ Rstp Elements ¾ Port Roles ¾ Port States STP Config STP Config Version Forward DelayHello Time Max Age STP Summary Port Config ExtPath PriorityIntPath Edge Port Instance Config Region Config¾ Region Config Mstp Instance Instance ¾ Instance TableClear ¾ VLAN-Instance Mapping Path Cost Instance Port ConfigInstance ID Port Protect STP Security ¾ TC Protect ¾ Root Protect¾ Bpdu Protect ¾ Bpdu Filter TC Protect 11 TC Protect Application Example for STP Function On Spanning Tree→MSTP Instance→Region On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Instance Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration ¾ Multicast Overview Multicast ¾ Multicast Address Table ¾ Multicast Address Multicast IP Port Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process ¾ Igmp Snooping Fundamentals Snooping Config Description Displays Igmp Snooping status Member ¾ Igmp Snooping Status Fast Leave Igmp Snooping Multicast Vlan ¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Snooping→Snooping Config Snooping→Port ConfigMulticast IP Multicast IP Table Static Multicast IP ¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast Port Filter IP-Range Action Mode ¾ Port Filter ConfigFilter Bound IP-Range ID Packet Statistics Port Displays the port number of the switch Query PacketMulticast→Multicast Filter→IP-Range Multicast→Multicast Filter→Port Filter Return to Contents ¾ QoS ¾ Priority ModeQoS 802.1Q frame ¾ Schedule Mode SP-Mode DiffServ ¾ Port Priority ConfigPort Priority Displays the LAG number which the port belongs to 2 802.1P/CoS Mapping ¾ 802.1P Priority ConfigRequired. On QoS→DiffServ→Port Priority ¾ Priority Level ¾ Dscp Priority Config Configuration Procedure Step Operation DescriptionDscp Priority Mapping ¾ Priority Level Schedule ModeIt ranges from 0 to Priority Level Rate Limit ¾ Rate Limit ConfigBandwidth Control Egress Ratebps Storm ControlIngress Rate bps Broadcast Rate Voice VlanBps Mulitcast Rate ¾ Port Voice Vlan Mode Packet Type Processing Mode Global Config¾ Security Mode of Voice Vlan Enter the Vlan ID of the voice Vlan Port ModeAging Time OUI address is aging out OUI Config Optional. On QoS→Voice VLAN→OUI Config page, you Required. On VLAN→802.1Q VLAN→VLAN ConfigRequired. On QoS→Voice VLAN→Port Config Required. On QoS→Voice VLAN→Global Config ACL ACL ConfigACL Summary ACL Create ¾ Create ACL MAC ACL¾ Create MAC ACL Rule ID Extend-IP ACL Standard-IP ACL¾ Create Standard-IP ACL Mask Policy Summary Policy Config¾ Create Extend-IP ACL IP Protocol Action Create Policy CreateIndex Displays the index of the policy Displays the ID of the ACL contained in the policy Binding Table Policy Binding¾ Create Action ¾ Policy Bind Table Vlan Binding Port BindingInterface Direction Displays the binding direction Application Example for ACL ¾ VLAN-Bind ConfigEnter the ID of the Vlan you want to bind ¾ VLAN-Bind Table On ACL→ACL Config→Standard-IP ACL page, select ACL On ACL→ACL Config→ACL Create page, create ACL Limit2 ¾ Snmp Overview Snmp¾ Snmp Management Frame ¾ Snmp Versions ¾ MIB Introduction ¾ Snmp Configuration Outline Snmp Config, Notification and Rmon Snmp Config Snmp Group Snmp ViewMIB Object ID View Type Snmp Group Following entries are displayed on this screen ¾ Group Config ¾ Group Table Snmp User Auth Password Auth ModePrivacy Mode Privacy Password Snmp Community AccessCommunity Name MIB View Required. On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalConfig→Global Config page, enable Snmp On the SNMP→SNMP Config→SNMP ¾ Create Notification NotificationIP Address UDP Port Rmon TimeoutRetry ¾ Notification Table ¾ History Control Table History ControlRmon Group Function ¾ Event Table Event ConfigAlarm Config Sample Type VariableRising Threshold Rising Event 131 CPU Monitor MaintenanceSystem Monitor Level Description 12.2 LogMemory Monitor Level Description Debugging Log Table¾ Log Info Time Local Log ¾ Local Log ConfigLog Buffer Log File Remote Log Backup Log¾ Log Host Host IP ¾ Backup Log Device DiagnosticsCable Test ¾ Cable Test Loopback Network Diagnostics Tracert ¾ Ping ConfigPing 10 Tracert Following entries are displayed on this screen ¾ Tracert Config Appendix a Specifications Configure TCP/IP component Appendix B Configuring the PCs Now Appendix C Glossary Remote Authentication Dial-in User Service Radius Multicast SwitchingIgmp Snooping Igmp Query Simple Network Management Protocol Snmp Rapid Spanning Tree Protocol RstpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA