Table of Contents
Advertisement
SSH Access
The AP supports Secure Shell (SSH) version 2, for secure remote CLI (Telnet) sessions. SSH
provides strong authentication and encryption of session data.
The SSH server (AP) has host keys - a pair of asymmetric keys - a private key that resides on
the AP and a public key that is distributed to clients that need to connect to the AP. As the client
has knowledge of the server host keys, the client can verify that it is communicating with the
correct SSH server.
Client authentication is performed as described in
Table 18: SSH Client Authentication
If RADIUS-Based
Management is...
Enabled
Disabled
SSH Session Setup
An SSH session is setup through the following process:
1. The SSH server public key is transferred to the client using out-of-band or in-band
mechanisms.
2. The SSH client verifies the correctness of the server using the server's public key.
3. The user/client authenticates to the server.
4. An encrypted data session starts. The maximum number of SSH sessions is limited to two.
If there is no activity for a specified amount of time (the Telnet Session Timeout parameter),
the AP will timeout the connection.
Table
Client Authentication Performed by...
Using a username/password pair
Using a password to authenticate the user over a secure channel
created using SSH.
Management Configuration
18.
Issue 1 September 2004
87
Advertisement
Table of Contents
