Specifying The Source Ip Address For Ssh Packets; Establishing A Connection To An Stelnet Server - HP FlexNetwork 10500 Series Security Configuration Manual

Tasks at a glance
(Optional.) Establishing a connection to an Stelnet server based on Suite B

Specifying the source IP address for SSH packets

As a best practice, specify the IP address of the loopback interface as the source address of SSH
packets for the following purposes:
•
Ensuring the communication between the Stelnet client and the Stelnet server.
•
Improving the manageability of Stelnet clients in authentication service.
To specify the source IP address for SSH packets:
Step
1. Enter system view.
2. Specify the source
address for SSH packets.

Establishing a connection to an Stelnet server

When you try to access an Stelnet server, the device must use the server's host public key to
authenticate the server. If the server's host public key is not configured on the device, the device will
notify you to confirm whether to continue with the access.
•
If you choose to continue, the device accesses the server and downloads the server's host
public key.
•
If you choose to not continue, the connection cannot be established.
As a best practice, configure the server's host public key on the device in an insecure network.
To establish a connection to an IPv4 Stelnet server:
Command
system-view
•
Specify the source IPv4 address
for SSH packets:
ssh client source { interface
interface-type interface-number | ip
ip-address }
•
Specify the source IPv6 address
for SSH packets:
ssh client ipv6 source { interface
interface-type interface-number |
ipv6 ipv6-address }
366
Remarks
N/A
By default, the source IP
address for SSH packets is not
configured.
The IPv4 SSH packets use the
primary IP address of the
output interface specified in
the routing entry as their
source address. The IPv6 SSH
packets automatically select
an IPv6 address as their
source address in compliance
with RFC 3484.