IKE configuration prerequisites ··································································································································· 283
IKE configuration task list ············································································································································ 283
Configuring an IKE profile ·········································································································································· 284
Configuring an IKE proposal ······································································································································ 286
Configuring an IKE keychain ······································································································································ 287
Configuring IKE DPD···················································································································································· 290
Enabling invalid SPI recovery ····································································································································· 291
Displaying and maintaining IKE ································································································································· 292
IKE configuration examples ········································································································································ 292
Verifying the configuration ································································································································· 295
Troubleshooting IKE ····················································································································································· 295
Configuring SSH ····················································································································································· 300
Overview ······································································································································································· 300
How SSH works ··················································································································································· 300
SSH authentication methods ······························································································································· 301
FIPS compliance ··························································································································································· 302
Generating local key pairs ································································································································· 303
Enabling the Stelnet server ································································································································· 304
Enabling the SFTP server ···································································································································· 304
Enabling the SCP server ····································································································································· 305
Configuring NETCONF over SSH ····················································································································· 305
Configuring an SSH user ···································································································································· 307
Working with SFTP directories ··························································································································· 314
Working with SFTP files ······································································································································ 314
Displaying help information ······························································································································· 314
Displaying and maintaining SSH ······························································································································· 317
Stelnet configuration examples ··································································································································· 317
vii