HP (Hewlett-Packard) 331404-008 Switch User Manual


 
Command line interface 11
Encryption:
AES256-CBC
AES192-CBC
AES128-CBC
3DES-CBC
3DES
ARCFOUR
User Authentication—Local password authentication; Remote Authentication Dial-in User Service (RADIUS)
The following SSH clients are supported:
SSH 3.0.1 for Linux (freeware)
SecureCRT® 4.1.8 (VanDyke Technologies, Inc.)
OpenSSH_3.9 for Linux (FC 3)
FedoraCore 3 for SCP commands
PuTTY Release 0.58 (Simon Tatham) for Windows
NOTE: The GbE2 Interconnect Switch implementation of SSH is based on versions 1.5 and 2.0, and supports
SSH clients from version 1.0 through version 2.0. SSH clients of other versions are not supported. You may
configure the client software to use protocol SSH version 1 or version 2.
By default, SSH service is not enabled on the GbE2 Interconnect Switch. Once the IP parameters are configured, you
can access the command line interface to enable SSH.
To establish an SSH connection with the GbE2 Interconnect Switch, run the SSH program on your workstation by
issuing the ssh command, followed by the user account name and the GbE2 Interconnect Switch IP address:
>> # ssh <user><GbE2 Interconnect Switch IP address>
You will then be prompted to enter your password.
NOTE: The first time you run SSH from your workstation, a warning message might appear. At the prompt,
enter yes to continue.
Accessing the GbE2 Interconnect Switch
To enable better switch management and user accountability, the GbE2 Interconnect Switch provides different levels
or classes of user access. Levels of access to the CLI and Web management functions and screens increase as needed
to perform various GbE2 Interconnect Switch management tasks. The three levels of access are:
User—User interaction with the GbE2 Interconnect Switch is completely passive; nothing can be changed on the
GbE2 Interconnect Switch. Users may display information that has no security or privacy implications, such as
GbE2 Interconnect Switch statistics and current operational state information.
Operator—Operators can only effect temporary changes on the GbE2 Interconnect Switch. These changes will
be lost when the GbE2 Interconnect Switch is rebooted/reset. Operators have access to the GbE2 Interconnect
Switch management features used for daily GbE2 Interconnect Switch operations. Because any changes an
operator makes are undone by a reset of the GbE2 Interconnect Switch, operators cannot severely impact
switch operation, but do have access to the Maintenance menu.
Administrator—Only administrators can make permanent changes to the GbE2 Interconnect Switch
configuration, changes that are persistent across a reboot/reset of the GbE2 Interconnect Switch. Administrators
can access GbE2 Interconnect Switch functions to configure and troubleshoot problems on the switch. Because
administrators can also make temporary (operator-level) changes as well, they must be aware of the interactions
between temporary and permanent changes.
Access to GbE2 Interconnect Switch functions is controlled through the use of unique usernames and passwords.
Once you are connected to the GbE2 Interconnect Switch via the local console, Telnet, or SSH, you are prompted to
enter a password. The password entered determines the access level. The default user names/password for each
access level is listed in the following table.
NOTE: It is recommended that you change default GbE2 Interconnect Switch passwords after initial
configuration and as regularly as required under your network security policies. For more information, see the
“Setting passwords” section in the “First-time configuration” chapter.