Chapter 34 System Remote Management

This command sets an authentication method used by the HTTP/HTTPS server to authenticate the client(s).

Router# configure terminal

Router(config)# ip http authentication Example

This following example sets a certificate named MyCert used by the HTTPS server to authenticate itself to the SSL client.

Router# configure terminal

Router(config)# ip http secure-server cert MyCert

34.4 SSH

Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network.

34.4.1 SSH Implementation on the NXC

Your NXC supports SSH versions 1 and 2 using RSA authentication and four encryption methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the NXC for remote management on port 22 (by default).

34.4.2 Requirements for Using SSH

You must install an SSH client program on a client computer (Windows or Linux operating system) that is used to connect to the NXC over SSH.

34.4.3 SSH Commands

The following table describes the commands available for SSH. You must use the configure terminal command to enter the configuration mode before you can use these commands.

Table 127 Command Summary: SSH

COMMAND

DESCRIPTION

[no] ip ssh server

Allows SSH access to the NXC CLI. The no

 

command disables SSH access to the NXC CLI.

[no] ip ssh server cert certificate_name

Sets a certificate whose corresponding private

 

key is to be used to identify the NXC for SSH

 

connections. The no command resets the

 

certificate used by the SSH server to the factory

 

default (default).

 

certificate_name: The name of the

 

certificate. You can use up to 31 alphanumeric

 

and ;‘~!@#$%^&()_+[]{}’,.=- characters.

 

 

216

 

NXC CLI Reference Guide