Qtech QSW-3200-28T [93/136] Brief introduction of ssh

+7(495) 797-3311www.qtech.ru

Москва, Новозаводская ул., 18, стр. 1

Chapter 13 SSH CONFIGURATION

13.1 Brief introduction of SSH

SSH is short for Secure Shell. Users can access to the device via standard SSH client, and

sent up safe connection with device. The Data that transmitted via SSH connection are

encrypt, which assure the transmitted sensitive data, management data and configuration

data, such as password, between the users and devices will not be wiretapped or acquired

illegally by the third party.

SSH can replace Telnet, providing users with means of safely management and device

configuration.

13.2 SSH Configuration

The configuration task list of SSH is as follows:

 Enable/disable SSH function of the device

 SSH secret key configuration

 Others

13.2.1 Enable/disable SSH function of the device

Enable/disable SSH function of the device in global mode, users can not access to the devices

via SSH client when SSH function is closed. To access to the device via SSH client, users

need to configure correct secret key and upload the secret key in the device besides opening

up the SSH function.

Configuration command is as following:

 ssh

 no ssh

Example:

! Enable SSH

QTECH(config)#ssh

13.2.2 SSH key configuration

Use SSH secret key in privileged mode. User cannot use SSH client to log in if there is no

secret key or the key is incorrect or the key is not load. In order to log in by SSH client,

configure correct key and load it with SSH enabling.

The configured secret key should be RSA. There are two kinds of keys: public and private. It

can use the default key and also can download keyfile to device by tftp and ftp. Configured key

can be used after loading. Configured key is stored in Flash storage which will be load when

system booting. It also can load the key stored in Flash storage by command line when system

booting.

If configured key is not ESA key or public and private key are not matched, user cannot log in

by SSH.

Keyfile contains explanation and key explain line and the key. Explain line must contain «:» or

space. Key contains the key coded by Base64, excluding «:» and space. Private keyfile

cannot contain public key. Private keyfile cannot use password to encrypt.

(1) Configure default key. The command is as following:

 Crypto key generate rsa