Chapter 8 Ssh Terminal Services; Ssh Terminal Services; Ssh Overview - Huawei Quidway S6500 Series Operation Manual

Operation Manual - System Management
Quidway S6500 Series Ethernet Switches

Chapter 8 SSH Terminal Services

8.1 SSH Terminal Services

8.1.1 SSH Overview

Secure Shell (SSH) can provide information security and powerful authentication to
prevent such assaults as IP address spoofing, plain-text password interception when
users log on to the switch remotely from an insecure network environment. A switch can
connect to multiple SSH clients. SSH Client functions to enable SSH connections
between users and the Ethernet switch or UNIX host that support SSH Server. You can
set up SSH channels for local connection. See Figure 8-1.
Currently the switch which runs SSH server supports SSH version 1.5.
1: Switch running SSH server
Figure 8-1 Setting up SSH channels in LAN
Note:
In the above figure, the VLAN for the Ethernet port must have been configured with
VLAN interfaces and IP address.
The communication process between the server and client include these five stages:
version negotiation stage, key negotiation stage, authentication stage, session request
stage, interactive session stage.
Version negotiation stage: The client sends TCP connection requirement to the
server. When TCP connection is established, both ends begin to negotiate SSH
version. If they can work together in harmony, they enter key algorithm negotiation
stage. Otherwise the server clears the TCP connection.
1
3
2
2: PC running SSH client
Huawei Technologies Proprietary
8-1
Chapter 8 SSH Terminal Services
3: Ethernet LAN