Chapter 37 System

37.8.2 SSH Implementation on the ZyWALL

Your ZyWALL supports SSH versions 1 and 2 using RSA authentication and four encryption methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the ZyWALL for management using port 22 (by default).

37.8.3 Requirements for Using SSH

You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the ZyWALL over SSH.

37.8.4 Configuring SSH

Click Configuration > System > SSH to change your ZyWALL’s Secure Shell settings. Use this screen to specify from which zones SSH can be used to manage the ZyWALL. You can also specify from which IP addresses the access can come.

Figure 326 Configuration > System > SSH

The following table describes the labels in this screen.

Table 187 Configuration > System > SSH

LABEL

DESCRIPTION

Enable

Select the check box to allow or disallow the computer with the IP address that matches

 

the IP address(es) in the Service Control table to access the ZyWALL CLI using this

 

service.

 

 

Version 1

Select the check box to have the ZyWALL use both SSH version 1 and version 2 protocols.

 

If you clear the check box, the ZyWALL uses only SSH version 2 protocol.

 

 

Server Port

You may change the server port number for a service if needed, however you must use the

 

same port number in order to use that service for remote management.

 

 

Server

Select the certificate whose corresponding private key is to be used to identify the ZyWALL

Certificate

for SSH connections. You must have certificates already configured in the My Certificates

 

screen (Click My Certificates and see Chapter 33 on page 413 for details).

 

 

Service Control

This specifies from which computers you can access which ZyWALL zones.

 

 

474

 

ZyWALL 110/310/1100 Series User’s Guide