Ssh Server; Ssl Overview; Ssl Authentication - Pepperl+Fuchs ICDM-RX/TCP-DB9/RJ45-PM Installation And Configuration Manual

ICDM-RX/TCP Installation and Configuration Guide

SSH Server

Telnet Port 4607 yes
SSH (PuTTY) 4607 no
HTTP (Port 80) yes
HTTPS (Port 443) no
Email yes
SNMP yes
RFC1006 yes
† Enable Monitoring Secure Data via Telnet must be enabled. SSH does not support port monitoring. You
can set the securemon enable option.
admin commands are disabled except for read-only ID command required by NS-Link to identify the
device.
The intention is to allow NS-Link to operate through an SSL connection to Port 4606 while is in Secure Data
Mode, and to allow NS-Link to operate through a MAC connection with Secure Config Mode enabled and
Secure Data Mode disabled.
6.3.4. SSH Server
The ICDM-RX/TCP SSH server has the following characteristics:
• Requires password authentication – even if the password is empty.
• Enabled/disabled along with telnet access independently of Secure Data and Secure Config modes.
• The ICDM-RX/TCP uses third-party MatrixSSH library from PeerSec Networks: http://www.peersec.com/.

6.3.5. SSL Overview

ICDM-RX/TCP SSL provides the following features:
• Provides both encryption and authentication.
- Encryption prevents a third-party eavesdropper from viewing data that is being transferred.
- Authentication allows both the client (that is, web browser) and server (that is. ICDM-RX/TCP) to
ensure that only desired parties are allowed to establish connections. This prevents both unauthorized
access and man-in-the-middle attacks on the communications channel.
• Several slightly different SSL protocols are supported by the ICDM-RX/TCP, SSLv3, TLSv1.0, TLS1.1, and
TLS1.2.
• The ICDM-RX/TCP uses third-party MatrixSSL library from PeerSec Networks: http://www.peersec.com/
matrixssl.html.

6.3.6. SSL Authentication

ICDM-RX/TCP SSL authentication has the following features:
• Authentication means being able to verify the identity of the party at the other end of a communications
channel. A username/password is a common example of authentication.
• SSL/TLS protocols allow authentication using either RSA certificates or DSS certificates. ICDM-RX/TCP
supports only RSA certificates.
Weakest
yes yes
no no
yes yes
no no
yes yes
yes yes
yes yes
disabled yes
yes disabled
disabled disabled
yes yes
disabled disabled
disabled disabled
disabled disabled
Strongest
yes
disabled
disabled
yes
disabled
disabled
disabled
57