Generating The Host Key Pair - Edge-Core ES3528MV2 Management Manual

| Security Measures
C 13
HAPTER
Configuring the Secure Shell
G
ENERATING THE
H K P
OST EY AIR
Use the Security > SSH (Configure Host Key - Generate) page to generate
a host public/private key pair used to provide secure communications
between an SSH client and the switch. After generating this key pair, you
must provide the host public key to SSH clients and import the client's
public key to the switch as described in the section
Keys" on page 347.
A host key pair must be configured on the switch before you can
N :
OTE
enable the SSH server. See
CLI R
EFERENCES
"Secure Shell" on page 838
◆
P
ARAMETERS
These parameters are displayed:
Host-Key Type – The key type used to generate the host key pair
◆
(i.e., public and private keys). (Range: RSA (Version 1), DSA
(Version 2), Both; Default: Both)
The SSH server uses RSA or DSA for key exchange when the client first
establishes a connection with the switch, and then negotiates with the
client to select either DES (56-bit) or 3DES (168-bit) for data
encryption.
The switch uses only RSA Version 1 for SSHv1.5 clients and DSA
N :
OTE
Version 2 for SSHv2 clients.
Save Host-Key from Memory to Flash – Saves the host key from
◆
RAM (i.e., volatile memory) to flash memory. Otherwise, the host key
pair is stored to RAM by default. Note that you must select this item
prior to generating the host-key pair. (Default: Disabled)
W I
EB NTERFACE
To generate the SSH host key pair:
Click Security, SSH.
1.
Select Configure Host Key from the Step list.
2.
Select Generate from the Action list.
3.
Select the host-key type from the drop-down box.
4.
Select the option to save the host key from memory to flash if required.
5.
Click Apply.
6.
– 346 –
"Configuring the SSH Server" on page
"Importing User Public
344.