Configuring Ssh; Usage Guidelines; Configuring Https - AMX NXA-ENET8-2POE Operation/Reference Manual

Configuring SSH

Use the SSH Configuration page to configure access to the Secure Shell (SSH) management interface. SSH
provides remote management access to this switch as a secure replacement for Telnet.
When the client contacts the switch via the SSH protocol, the switch generates a public-key that the client uses
along with a local user name and password for access authentication. SSH also encrypts all data transfers
passing between the switch and SSH-enabled management station clients, and ensures that data traveling over
the network arrives unaltered.
FIG. 41 SSH Configuration
SSH Configuration parameters
• Mode

Usage Guidelines




1.
Click Configuration, Security, Switch, SSH.
2.
Enable SSH if required.
3.
Click Save.

Configuring HTTPS

Use the HTTPS Configuration page to enable the Secure Hypertext Transfer Protocol (HTTPS) over the
Secure Socket Layer (SSL).
HTTPS provides secure access (i.e., an encrypted connection) to the switch's web interface.
FIG. 42 HTTPS Configuration
HTTPS Configuration parameters
• Mode
• Automatic
Redirect
Usage Guidelines

NXA-ENET8-2POE Gigabit Ethernet Layer 2 PoE Switch
Allows you to enable/disable SSH service on the switch. (Default: Enabled)
You need to install an SSH client on the management station to access the switch for management
via the SSH protocol. The switch supports both SSH Version 1.5 and 2.0 clients.
SSH service on this switch only supports password authentication. The password can be
authenticated either locally or via a RADIUS or TACACS+ remote authentication server, as
specified on the Auth Method menu (Configuring The Authentication Method For Management
Access section on page 51).
To use SSH with password authentication, the host public key must still be given to the client,
either during initial connection or manually entered into the known host file. However, you do not
need to configure the client's keys.
The SSH service on the switch supports up to four client sessions. The maximum number of client
sessions includes both current Telnet sessions and SSH sessions.
Enables HTTPS service on the switch. (Default: Enabled)
Sets the HTTPS redirect mode operation. When enabled, management access to
the HTTP web interface for the switch are automatically redirected to HTTPS.
(Default: Disabled)
If you enable HTTPS, you must indicate this in the URL that you specify in your browser:
https://device[:port-number]
Configuring the NXA-ENET8-2POE
53