Filter
Top Products
Configuring and managing IP interfaces and services 131
Nortel WLAN—Security Switch 2300 Series Configuration Guide
If a key has already been generated, the command replaces the old key with a new one. The new key takes
affect for all new SSH sessions.
You can verify the key using the following command:
show crypto key ssh
For example:
WSS# show crypto key ssh
ec:6f:56:7f:d1:fd:c0:28:93:ae:a4:f9:7c:f5:13:04
This command displays the checksum (also called a fingerprint) of the public key. When you initially connect
to the WSS with an SSH client, you can compare the SSH key checksum displayed by the WSS with the one
displayed by the client to verify that you really are connected to the WSS and not another device. Generally,
SSH clients remember the encryption key after the first connection, so you need to check the key only once.
The WSS stores the key in nonvolatile storage where the key remains even after software reboots.
Adding an SSH user
To log in with SSH, a user must supply a valid username and password. To add a username and password to
the local database, use the following command:
set user username password password
Optionally, you also can configure WSS Software either to locally authenticate the user or to use a RADIUS
server to authenticate the user. Use the following command:
set authentication admin {user-wildcard} method1 [method2] [method3] [method4]
To add administrative user mxadmin with password letmein, and use RADIUS server group sg1 to authenticate
the user, type the following commands:
WSS# set user wssadmin password letmein
success: User wssadmin created
WSS# set authentication admin wssadmin sg1
success: change accepted
(For more information, see “Adding and clearing local users for Administrative Access” (page 77).)
Changing the SSH service port number
To change the SSH port the WSS listens on for SSH connections, use the following command:
set ip ssh port port-num
Caution! If you change the SSH port number from an SSH session, WSS Software
immediately ends the session. To open a new management session, you must configure
the SSH client to use the new SSH port number.