Alcatel Carrier Internetworking Solutions omniswitch Switch User Manual


 
Using Secure Shell Logging Into the Switch
page 1-8 OmniSwitch 6600 Family Switch Management Guide March 2005
Using Secure Shell
The OmniSwitch Secure Shell feature provides a secure mechanism that allows you to log in to a remote
switch, to execute commands on a remote device, and to move files from one device to another. Secure
Shell provides secure, encrypted communications even when your transmission is between two untrusted
hosts or over an unsecure network. Secure Shell protects against a variety of security risks including the
following:
IP spoofing
IP source routing
DNS spoofing
Interception of clear-text passwords and other data by intermediate hosts
Manipulation of data by users on intermediate hosts
Note. The OmniSwitch supports Secure Shell Version 2 only.
Secure Shell Components
The OmniSwitch includes both client and server components of the Secure Shell interface and the Secure
Shell FTP file transfer protocol. SFTP is a subsystem of the Secure Shell protocol. All Secure Shell FTP
data are encrypted through a Secure Shell channel.
Since Secure Shell provides a secure session, the Secure Shell interface and SFTP are recommended
instead of the Telnet program or the FTP protocol for communications over TCP/IP for sending file
transfers. Both Telnet and FTP are available on the OmniSwitch but they do not support encrypted
passwords.
Note. Secure Shell may only be used to log into the switch to manage the switch. It cannot be used for
Layer 2 authentication through the switch.
Secure Shell Interface
The Secure Shell interface is invoked when you enter the ssh command. After the authentication process
between the client and the server is complete, the remote Secure Shell interface runs in the same way as
Telnet. Refer to “Starting a Secure Shell Session” on page 1-11 to for detailed information.
Secure Shell File Transfer Protocol
Secure Shell FTP is the standard file transfer protocol used with Secure Shell version 2. Secure Shell FTP
is an interactive file transfer program (similar to the industry standard FTP) which performs all file
transfer operations over a Secure Shell connection.
You invoke the Secure Shell FTP protocol by using the sftp command. Once the authentication phase is
completed, the Secure Shell FTP subsystem runs. Secure Shell FTP connects and logs into the specified
host, then enters an interactive command mode. Refer to “Starting a Secure Shell Session” on page 1-11
for detailed information.