DELL S50V User Manual
938
|
Security
www.dell.com | support.dell.com
•
ip ssh connection-rate-limit:
Configure the maximum number of incoming SSH connections per
minute.
•
ip ssh hostbased-authentication enable:
Enable hostbased-authentication for the SSHv2 server.
•
ip ssh key-size:
Configure the size of the server-generated RSA SSHv1 key.
•
ip ssh password-authentication enable:
Enable password authentication for the SSH server.
•
ip ssh pub-key-file:
Specify the file to be used for host-based authentication.
•
ip ssh rhostsfile:
Specify the rhost file to be used for host-based authorization.
•
ip ssh rsa-authentication enable:
Enable RSA authentication for the SSHv2 server.
•
ip ssh rsa-authentication:
Add keys for the RSA authentication.
•
show crypto:
Display the public part of the SSH host-keys.
•
show ip ssh client-pub-keys:
Display the client public keys used in host-based authentication.
•
show ip ssh rsa-authentication:
Display the authorized-keys for the RSA authentication.
•
ssh-peer-rpm
: Open an SSH connection to the peer RPM.
Secure Shell Authentication
Secure Shell (SSH) is disabled by default. Enable it using the command
ip ssh server enable
.
SSH supports three methods of authentication:
•
•
•
Important Points to Remember for SSH Authentication
•
If more than one method is enabled, the order in which the methods are preferred is based on the
ssh_config file on the Unix machine.
ssh_config file on the Unix machine.
•
When all the three authentication methods are enabled, password authentication is the backup method
when the RSA method fails.
when the RSA method fails.
•
The files known_hosts and known_hosts2 are generated when a user tries to SSH using version 1 or
version 2, respectively.
version 2, respectively.
SSH Authentication by Password
Authenticate an SSH client by prompting for a password when attempting to connect to the Dell Force10
system. This is the simplest methods of authentication and uses SSH version 1.
system. This is the simplest methods of authentication and uses SSH version 1.
Enable SSH password authentication using the command
ip ssh password-authentication
enable
from
CONFIGURATION mode. View your SSH configuration using the command
show ip ssh
from EXEC
Privilege mode.