Filter
Top Products
130 Configuring and managing IP interfaces and services
NN47250-500 (320657-F Version 02.01)
Managing the management services
WSS Software provides the following services for managing a WSS over the network:
SSH is enabled by default. Telnet and HTTPS are disabled by default.
A 2380 can have up to eight Telnet or SSH sessions, in any combination, and one Console session. A 2360/2361-8 or
2350 can have up to four Telnet or SSH sessions, in any combination, and one Console session.
Managing SSH
WSS Software supports Secure Shell (SSH) Version 2. SSH provides secure management access to the CLI over the
network. SSH requires a valid username and password for access to the switch. When a user enters a valid username and
password, SSH establishes a management session and encrypts the session data.
Login timeouts
When you access the SSH server on a WSS, WSS Software allows you 10 seconds to press Enter for the username
prompt. After the username prompt is displayed, WSS Software allows 30 seconds to enter a valid username and
password to complete the login. If you do not press Enter or complete the login before the timer expires, WSS Software
ends the session. These timers are not configurable.
Enabling SSH
SSH is enabled by default. To disable or reenable it, use the following command:
set ip ssh server {enable | disable}
SSH requires an SSH authentication key. You can generate one or allow WSS Software to generate one. The first time
an SSH client attempts to access the SSH server on a WSS, the switch automatically generates a 1024-byte SSH key. If
you want to use a 2048-byte key instead, use the following command to generate one:
WSS# crypto generate key ssh 2048
key pair generated
Secure Shell (SSH) SSH provides a secure connection to the CLI through TCP port
22.
Telnet Telnet provides a nonsecure connection to the CLI through TCP
port 23.
HTTPS HTTPS provides a secure connection to the Web management
application through TCP port 443.
Note. To ensure that all CLI management sessions are encrypted, after you configure
SSH, disable Telnet.