Nortel 8300 补充手册

Enabling secure protocols

Disabling HTTP

You use the HTTP protocol to communicate with the switch for operations
by the built-in Web management server. The default setting for the Web
management server is disabled.

If the Web management server is enabled, you can use the following
commands to disable the HTTP protocol.

CLI interface

config web-server disable

NNCLI interface

NYK>:5(config)#no web-server

Disabling rlogin

You use the rlogin protocol to communicate with the switch for CLI
operations. The default setting for the rlogin service is disabled.

If the rlogin service is enabled, you can use the following commands to
disable the rlogin protocol.

CLI interface

config bootconfig flags rlogind false

NNCLI interface

NYK>:5(config)#no bootconfig flags rlogind

Enabling secure protocols

The following sections describe typical applications for a secure protocol,
and how to enable the protocol on the Ethernet Routing Switch 8300.

Enabling SSH and SCP

To enable the SSH and SCP protocols, you must load the DES encryption
image into the Ethernet Routing Switch 8000 Series memory. You can
obtain the DES encryption image from the Nortel web site. For more
information the configuring and enabling SSH and SCP, refer to Nortel
Ethernet Routing Switch 8300 Configuration — Security using CLI and
NNCLI (NN46200-503) ..

•

Use the following CLI command to enable SSH and SCP:

config bootconfig flags sshd true

•

Use the following NNCLI commands (Global Configuration Mode and
higher) to enable SSH and SCP:

bootconfig flags sshd

Nortel Ethernet Routing Switch 8300

Important Notice — Administration and Security

NN46200-601

3.01

Standard

4.0

27 August 2007