Establishing An Ssh Connection - HP ProLiant BL p-Class GbE2 Command Reference Manual

The Command Line Interface

Establishing an SSH Connection

Although a remote network administrator can manage the configuration of a GbE2
Interconnect Switch via Telnet, this method does not provide a secure connection. The Secure
Shell (SSH) protocol enables you to securely log into the GbE2 Interconnect Switch over the
network.
As a secure alternative to using Telnet to manage GbE2 Interconnect Switch configuration,
SSH ensures that all data sent over the network is encrypted and secure. In order to use SSH,
you must first configure it on the GbE2 Interconnect Switch. Refer to the "Secure Shell
Server Configuration" section in Chapter 6, for information on how to configure SSH.
The GbE2 Interconnect Switch can perform only one session of key/cipher generation at a
time. Therefore, an SSH/Secure Copy (SCP) client will not be able to log in if the GbE2
Interconnect Switch is performing key generation at that time or if another client has just
logged in before this client. Similarly, the system will fail to perform the key generation if an
SSH/SCP client is logging in at that time.
The supported SSH encryption and authentication methods are listed below.
•
Server Host Authentication—Client RSA authenticates the GbE2 Interconnect Switch in
the beginning of every connection
•
Key Exchange—RSA
•
Encryption—3DES-CBC, Data Encryption Standard (DES)
•
User Authentication—Local password authentication; Remote Authentication Dial-in
User Service (RADIUS)
The following SSH clients are supported:
•
SSH 1.2.23 and SSH 1.2.27 for Linux (freeware)
•
SecureCRT® 3.0.2 and SecureCRT 3.0.3 (VanDyke Technologies, Inc.)
•
F-Secure® SSH 1.1 for Windows® (F-Secure Corporation)
•
OpenSSH_3.4 for Linux (RH 8.1)
•
PuTTY Release 0.51 (Simon Tatham) for Windows
NOTE: The GbE2 Interconnect Switch implementation of SSH is based on version 1.5, and supports
SSH clients from version 1.0 through version 1.5. SSH clients of other versions (especially Version 2)
are not supported.
By default, SSH service is enabled on the GbE2 Interconnect Switch. Once the IP parameters
are configured, you can access the command line interface using an SSH connection.
1-4
HP CONFIDENTIAL Codename: Strawberry Part Number: 331404-001 Last Saved On: 7/17/03 12:46 PM
HP ProLiant BL p-Class GbE2 Interconnect Switch Command Reference Guide