Blade ICE G8124 Manuale Utente

56  

  Chapter 3: Securing Administration

BMD00220, October 2010

Although SSH and SCP are disabled by default, enabling and using these features provides the 
following benefits:

Identifying the administrator using Name/Password

Authentication of remote administrators

Authorization of remote administrators

Determining the permitted actions and customizing service for individual administrators

Encryption of management messages

Encrypting messages between the remote administrator and switch

Secure copy support

The BLADEOS implementation of SSH supports both versions 1.5 and 2.0 and supports SSH 
clients version 1.5 - 2.x. The following SSH clients have been tested: 

SSH 1.2.23 and SSH 1.2.27 for Linux (freeware)

SecureCRT 3.0.2 and SecureCRT 3.0.3 for Windows NT (Van Dyke Technologies, Inc.)

F-Secure SSH 1.1 for Windows (Data Fellows)

Putty SSH

Cygwin OpenSSH

Mac X OpenSSH

Solaris 8 OpenSSH

AxeSSH SSHPro

SSH Communications Vandyke SSH A

F-Secure

SSH and SCP features are disabled by default. To change the SSH/SCP settings, using the following 
procedures.

Begin a Telnet session from the console port and enter the following commands:

Enter the following commands from the switch CLI to enable the SCP 

putcfg_apply

 and 

putcfg_apply_save

 commands:

RS G8124(config)# [no] ssh enable

RS G8124(config)# [no] ssh scp-enable