IP address spoofing, plain-text password interception. Currently, the S3100-52P Ethernet Switches support SSH2.0. Acting as an SSH server, a switch allows for the connections of multiple SSH clients. Through SSH Client, a user can establish a connection to a switch or UNIX host running SSH Server.
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service The server starts to authenticate the user. If the user is configured as having no authentication on the server, the following step is skipped and the session request stage starts directly.
Page 5
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Table 1-1 SSH2.0 Server configuration tasks Operation Command Related section Section “Configuring Configure user interface(s) to user interface(s) to protocol inbound support specified protocol(s) support specified protocol(s)"...
Page 6
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Caution: If you have configured a user interface to support SSH protocol, to ensure a successful login to the user interface, you must configure AAA authentication for the user interface by using the authentication-mode scheme command.
Page 7
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Note: After the rsa local-key-pair create command is executed, you can execute the display rsa local-key-pair public command to display information about the public key (in H3C_host, for example).
Page 8
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Caution: If RSA authentication type is configured for a user, the RSA public key of the client user must be configured on the switch. By default, no authentication type is specified for a new user, and the new user cannot access the switch.
Page 9
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service V. Configuring a client public key for a user On the switch, you can configure a client public key (generated randomly on a client) for a client user.
Page 10
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Note: The above method requires you to transform the format of the public key on the client, and then manually configure the transformed public key on the server. So, the method is relatively more complex.
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service 1.1.3 SSH Client Configuration A variety of SSH client software are available, such as PuTTY and FreeBSD. For an SSH client to establish a connection with an SSH server, you must complete these...
Page 12
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service While generating the key pair, you must move the mouse continuously. The mouse should be restricted off the green process bar in the blue box of Figure 1-4. Otherwise, the process bar does not move and the key pair cannot be generated.
Page 13
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Figure 1-5 Generating the client key (3) Likewise, to save a private key, click “Save private key” and a warning window pops up to prompt you whether to save a private key without any precautions. Click “Yes” and enter a name (private for here) to save the private key.
Page 14
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Figure 1-7 Generating the client key (5) II. Specifying the IP address of the server Launch PuTTY.exe and the following window appears. 1-13...
Page 15
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Figure 1-8 SSH client interface 1 In the [Host Name (or IP address)] text box, enter the IP address of the server, for example, 10.110.28.10. Note that the IP address can be the IP address of any interface on the server that has SSH in the state of up and a route to the client.
Page 16
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Figure 1-9 SSH client interface 2 In the [Protocol options] field, select [2] from the [Preferred SSH protocol version] section. V. Open an SSH Connection with RSA If the client needs to use RSA authentication, you must specify the RSA private key file.
Page 17
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Figure 1-10 SSH client interface 3 Click <Browse…> to bring up the file selection window, navigate to the private key file and click <OK>. VI. Open an SSH Connection with Password Click <Open>.
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Figure 1-11 SSH client interface Enter the username and password to create an SSH connection. To log out, enter the quit command. 1.1.4 Configuring the Device as an SSH Client The following table describes SSH Client configuration tasks.
Page 19
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Operation Command Description Optional This command is used to configure the public key of Assign a public key ssh client server-ip assign a server on the client, so...
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service 1.1.5 Displaying SSH Configuration After the above configuration, you can execute the display command in any view to display the configuration information and running status of SSH, so as to verify your configuration.
Page 21
[H3C-ui-vty0-4] protocol inbound ssh # Set login protocol to SSH, authentication type to password, and authentication password to "abc" for user clinet001. [H3C] local-user client001 [H3C-luser-client001] password simple abc [H3C-luser-client001] service-type ssh [H3C-luser-client001] quit [H3C] ssh user client001 authentication-type password 1-20...
[H3C-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125 [H3C-rsa-key-code] public-key-code end [H3C-rsa-public-key] peer-public-key end [H3C] ssh user client002 assign rsa-key H3C002 # Make corresponding configuration on the host keeping the RSA private key and start the SSH client software to establish an SSH connection. 1.1.7 Configuring the Device as an SSH Client Configuration Example I.
Page 23
[H3C-rsa-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16 [H3C-rsa-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125 [H3C-rsa-key-code] public-key-code end [H3C-rsa-public-key] peer-public-key end [H3C] ssh client 10.165.87.136 assign rsa-key public Start SSH Client. Settings for the two authentication types are described respectively in the following: Password authentication # Start SSH Client with default encryption algorithms.
Chapter 1 SSH Terminal Service Do you want to save the server's public key?(Y/N):y Enter password: ************************************************************************** * Copyright(c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.* * Without the owner's prior written consent, * no decompiling or reverse-engineering shall be allowed. ************************************************************************** <H3C>...
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Setting connection idle timeout I. Configuring service type for an SSH user Table 1-12 Configure service type for an SSH user Operation Command Description Enter system view system-view —...
Page 28
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Operation Command Description dir [ remote-path ] Optional Display the file list of a The dir and ls commands directory ls [ remote-path ] have the same function.
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service Table 1-20 Display help information about an SFTP client command Operation Command Description Enter system view system-view — sftp host-ip Enter SFTP client view —...
Page 30
# Enable SFTP Server. [H3C] sftp server enable # Specify SFTP service for SSH user abc. [H3C] ssh user abc service-type sftp Configure Switch A (SFTP client) # Establish a connection to the remote SFTP server and enter SFTP client view.
Page 31
Operation Manual – SSH Terminal Service H3C S3100-52P Ethernet Switch Chapter 1 SSH Terminal Service File successfully Removed sftp-client> dir -rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 config.cfg -rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2 -rwxrwxrwx 1 noone...
Need help?
Do you have a question about the S3100-52P and is the answer not in the manual?
Questions and answers