Restricting Connections To Ssh; Disabling Http And Ftp; Ip Security - Lantronix SCS Reference Manual

IP
The ssh command can be followed by an optional command that will be executed on the remote machine,
and then the session will end. Place the command in quotes to maintain capitalization. The following
command will log user mary into host athena, provide a complete list of files including modification dates
and ownership, and then log mary out of the host.
Local_2>> ssh athena mary "ls -l"
mary@athena's password: (not echoed)
Outgoing SSH connections may be set as the preferred or dedicated service for a port. For more information,
see Preferred/Dedicated Protocols & Hosts on page 8-8.

6.5.3 Restricting Connections to SSH

To restrict incoming connections SSH and block non-encrypted logins, use the Set/Define Server Incoming
Secure command. The Server Incoming Secure command disallows unsecure Telnet and TCP connection
attempts. Access is through SSH only.
Local_2>> define server incoming secure
To re-enable Telnet, use the Set/Define Server Incoming Telnet command. SSH is always enabled.
Local_2>> define server incoming telnet

6.5.4 Disabling HTTP and FTP

You can make the SCS into a highly secure host by turning off the FTP and HTTP services. For information
on disabling HTTP and FTP, see Disabling the FTP and HTTP Servers on page 11-23.
The web interface will no longer be available.
Note:

6.6 IP Security

The SCS's IP security features allow an administrator to restrict incoming and outgoing TCP/IP sessions,
access to ports, and print jobs. Connections are allowed or denied based upon the source IP address for
incoming connections and print jobs and the destination IP address for outgoing connections.
IP security for connections can be set to Incoming Enabled/Disabled, Outgoing Enabled/Disabled, or Both.
Incoming refers to users on other hosts attempting to log into the SCS. Outgoing refers to local users
connecting to other TCP/IP hosts. The Both parameter enables or disables both Incoming and Outgoing
connections. IP security for printing can be set to Enabled or Disabled. The printing setting affects both LPR
and RTEL print jobs from the specified hosts.
The SCS has no default IP security restrictions.
Note:
Figure 6-36: Outgoing SSH Connection with Command
Figure 6-37: Restricting Connection to SSH
Figure 6-38: Re-enabling Telnet
6-17
IP Security