Avaya 580 Switch User Manual


 
Document No. 10-300077, Issue 2 4-3
Security
Enabling Secure Mode
To enable secure mode, use the following CLI command:
(configure)# secure-mode
Disabling Secure Mode
To disable secure mode, use the following CLI command:
(configure)# no secure-mode
Viewing the Secure Mode Setting
To view the secure mode setting, use the following CLI command:
> show secure-mode
SSHv2
Overview
Purpose of SSH The Avaya Multiservice switch supports Secure Shell (SSH) version 2 for
clients and servers. SSH is a protocol for secure remote login and other
secure services. SSH provides a secure service that is similar to Telnet.
SSH is necessary because Telnet transmits unencrypted text TCP/IP packets
that anyone on the same network can intercept. SSH encrypts the data being
transmitted and allows for several methods of client/server and user
authentication, connection integrity, and client/server verification. SSH runs
on top of a TCP/IP connection.
SSH Server and
Client
You can use the Avaya Multiservice switch as a server for SSH connections.
The SSH server protocol relies on a public/private key pair that is generated
on the server. The private key is kept on the server and cannot be viewed.
The public key can be displayed and is used by remote clients to connect to
the server. When a client tries to connect to the server, the server provides
the public key to the client. Depending on the configuration of the client, it
may use this key directly, or verify it against a locally stored copy.
The Avaya Multiservice switch can also be used as a client in SSH
connections.