Cisco 350XG series Administration Manual page 508

Security: SSH Client
Overview
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
SSH client helps the user manage a network composed of one or more switches
in which various system files are stored on a central SSH server. When
configuration files are transferred over a network, Secure Copy (SCP), which is an
application that utilizes the SSH protocol, ensures that sensitive data, such as
username/password cannot be intercepted.
Secure Copy (SCP) is used to securely transfer firmware, boot image,
configuration files, language files, and log files from a central SCP server to a
device.
With respect to SSH, the SCP running on the device is an SSH client application
and the SCP server is a SSH server application.
When files are downloaded via TFTP or HTTP, the data transfer is unsecured.
When files are downloaded via SCP, the information is downloaded from the SCP
server to the device via a secure channel. The creation of this secure channel is
preceded by authentication, which ensures that the user is permitted to perform
the operation.
Authentication information must be entered by the user, both on the device and on
the SSH server, although this guide does not describe server operations.
The following illustrates a typical network configuration in which the SCP feature
might be used.
Typical Network Configuration
23
489