Alcatel Carrier Internetworking Solutions omniswitch User Manual

Page of 260
Using Secure Shell
Logging Into the Switch
page 1-8
OmniSwitch 6600 Family Switch Management Guide
March 2005
Using Secure Shell
The OmniSwitch Secure Shell feature provides a secure mechanism that allows you to log in to a remote 
switch, to execute commands on a remote device, and to move files from one device to another. Secure 
Shell provides secure, encrypted communications even when your transmission is between two untrusted 
hosts or over an unsecure network. Secure Shell protects against a variety of security risks including the 
following:
• IP spoofing
• IP source routing
• DNS spoofing
• Interception of clear-text passwords and other data by intermediate hosts
• Manipulation of data by users on intermediate hosts
Note. The OmniSwitch supports Secure Shell Version 2 only.
Secure Shell Components
The OmniSwitch includes both client and server components of the Secure Shell interface and the Secure 
Shell FTP file transfer protocol. SFTP is a subsystem of the Secure Shell protocol. All Secure Shell FTP 
data are encrypted through a Secure Shell channel. 
Since Secure Shell provides a secure session, the Secure Shell interface and SFTP are recommended 
instead of the Telnet program or the FTP protocol for communications over TCP/IP for sending file 
transfers. Both Telnet and FTP are available on the OmniSwitch but they do not support encrypted 
passwords. 
Note. Secure Shell may only be used to log into the switch to manage the switch. It cannot be used for 
Layer 2 authentication through the switch.
Secure Shell Interface
The Secure Shell interface is invoked when you enter the 
 command. After the authentication process 
between the client and the server is complete, the remote Secure Shell interface runs in the same way as 
Telnet. Refer to 
 to for detailed information.
Secure Shell File Transfer Protocol
Secure Shell FTP is the standard file transfer protocol used with Secure Shell version 2. Secure Shell FTP 
is an interactive file transfer program (similar to the industry standard FTP) which performs all file 
transfer operations over a Secure Shell connection. 
You invoke the Secure Shell FTP protocol by using th
 command. Once the authentication phase is 
completed, the Secure Shell FTP subsystem runs. Secure Shell FTP connects and logs into the specified 
host, then enters an interactive command mode. Refer to 
 
for detailed information.