Qtech QSW-2900-24T-AC [181/209] Enable disable ssh function of the device

14-179

Chapter 14 SSH Configuration

14.1 Brief introduction of SSH

SSH is short for Secure Shell. Users can access to the device via standard SSH client, and sent up safe

connection with device. The Data that transmitted via SSH connection are encrypt, which assure the transmitted

sensitive data, management data and configuration data, such as password, between the users and devices will not be

wiretapped or acquired illegally by the third party.

SSH can replace Telnet, providing users with means of safely management and device configuration.

14.2 SSH Configuration

The configuration task list of SSH is as follows:

· Enable/disable SSH function of the device

· SSH secret key configuration

· Others

14.2.1 Enable/disable SSH function of the device

Enable/disable SSH function of the device in global mode, users can not access to the devices via

SSH client when SSH function is closed. To access to the device via SSH client, users need to

configure correct secret key and upload the secret key in the device besides opening up the SSH

function.

Configuration command is as following:

ssh

no ssh

Example:

! Enable SSH

QTECH(config)#ssh

14.2.2 SSH key configuration

Use SSH secret key in privileged mode. User cannot use SSH client to log in if there is no secret key or the

key is incorrect or the key is not load. In order to log in by SSH client, configure correct key and load it with SSH

enabling.

The configured secret key should be RSA. There are two kinds of keys: public and private. It can use the

default key and also can download keyfile to device by tftp and ftp. Configured key can be used after loading.

Configured key is stored in Flash storage which will be load when system booting. It also can load the key stored in

Flash storage by command line when system booting.

If configured key is not ESA key or public and private key are not matched, user cannot log in by SSH.

Keyfile contains explanation and key explain line and the key. Explain line must contain “:” or space. Key

contains the key coded by Base64, excluding “:”and space. Private keyfile cannot contain public key. Private keyfile

cannot use password to encrypt.