Dell Force10 S2410-01-10GE-24P Configuration Manual page 141

Secure SHell (SSH) provides secure management through an encrypted transport session between the
management station and switch.
Enabling secure management through SSH is a four-step process:
Note: Starting with SFTOS 2.5.1.1, SSH keys are generated automatically when you enable
the SSH Server. Skip to
1. Generate the SSH keys certificates offline.
2. Copy the SSH keys certificates to the switch using TFTP.
3. Enable the secure management server (SSH) on the switch.
4. Disable the insecure version of the management server (Telnet).
The SSH keys certificates are in a .zip file that are on the S-Series CD-ROM. You can also get them from
your Dell Force10 account team. The .zip file contains two directories—ssh and ssl:
• The ssh directory has example RSA1, RSA2, and DSA keys and a shell script called
"generate-keys.sh" that can be used to generate your own SSH keys.
Note: The ssl directory was intended for use in accessing the switch through a Web browser.
That functionality is not supported in SFTOS 2.5.2.
The scripts provided use OpenSSH (http://www.openssh.org/) for key generation. Other free and
commercial tools exist that can provide the same functionality, and you can use them if you like.
For an introduction to the options and commands related to the Telnet and SSH features, see
Management Connection to the Switch on page
Enabling SSH on page 142.
28.
Setting up a
Providing User Access Security | 141