Qtech QSW-3900-24-SFP-AC [23/245] Enable disable ssh function of the device
Макгруп McGrp.ru
Задайте вопрос
Зарегистрироваться

Qtech QSW-3900-24-SFP-AC [23/245] Enable disable ssh function of the device

Qtech QSW-3900-48-SFP-DC [23/245] Enable disable ssh function of the device
QTECH Software Configuration Manual
1-22
1.7.1 Enable/disable SSH function of the device
Enable/disable SSH function of the device in global mode, users can not access to the devices via SSH
client when SSH function is closed. To access to the device via SSH client, users need to configure correct secret key
and upload the secret key in the device besides opening up the SSH function.
Configuration command is as following :
ssh
no ssh
Example :
! Enable SSH
QTECH(config)#ssh
1.7.2 SSH key configuration
Use SSH secret key in privileged mode. User cannot use SSH client to log in if there is no secret key or the
key is incorrect or the key is not load. In order to log in by SSH client, configure correct key and load it with SSH
enabling.
The configured secret key should be RSA. There are two kinds of keys : public and private. It can use the
default key and also can download keyfile to device by tftp and ftp. Configured key can be used after loading.
Configured key is stored in Flash storage which will be load when system booting. It also can load the key stored in
Flash storage by command line when system booting.
If configured key is not ESA key or public and private key are not matched, user cannot log in by SSH.
Keyfile contains explanation and key explain line and the key. Explain line must contain “ : ” or space. Key
contains the key coded by Base64, excluding “ : ”and space. Private keyfile cannot contain public key. Private keyfile
cannot use password to encrypt.
1.7.2.1 Configure default key.
The command is as following :
crypto key generate rsa
Example :
! Configure SSH key to be default key
QTECH#crypto key generate rsa
1.7.2.2 Download or upload key by tftp or ftp.
The command is as following :
load keyfile { public | private } tftp server-ip filename
load keyfile { public | private } ftp server-ip filename username passwd
upload keyfile { public | private } tftp server-ip filename
upload keyfile { public | private } ftp server-ip filename username passwd
Example :
! Download keyfile pub.txt from tftp server 1.1.1.1 to be SSH public key
QTECH#load keyfile public tftp 1.1.1.1 pub.txt
1.7.2.3 Clear configured key.
This command will clear all keyfiles storaged in Flash storage. The configuration command is as following :
crypto key zeroize rsa
Example :
! Clear configured SSH key
QTECH#crypto key zeroize rsa

Содержание

Похожие устройства

Скачать