HP StorageWorks 2.128 SAN Director Switch - Manual (Page 41)

Fabric OS 5.x administrator guide 41
Commands that require a secure login channel must be issued from an original SSH session. If you start
an SSH session, and then use the
login
command to start a nested SSH session, commands that require
a secure channel are rejected.
Fabric OS 4.4.0 and later supports SSH protocol 2.0 (ssh2). For more information on SSH, see the SSH
IETF web site: http://www.ietf.org/ids.by.wg/secsh.html . Another informative source is SSH, The Secure
Shell: The Definitive Guide by Daniel J. Barrett, Richard Silverman.
Fabric OS 4.4.0 comes with the SSH server preinstalled; however, you must select and install the SSH
client. For information on installing and configuring the F-Secure SSH client, visit the following web site:
http://www.f-secure.com .
Configuring the telnet interface
Telnet is enabled by default. To prevent users from passing clear text passwords over the network when
they connect to the switch, you can disable the telnet interface.
NOTE: Before disabling the telnet interface, make sure you have an alternate method of establishing a
connection with the switch.
Disabling telnet
1. Connect to the switch and log in as admin.
Connect through some other means than telnet, for example, through SSH.
2. Issue the following command:
configure telnetd
3. In response to the System Services prompt, enter
y
.
4. In response to the telnetd prompt, enter
off
.
The telnet interface is disabled. If you entered the command during a standard telnet session, the
session terminates. For example:
Enabling telnet
1. Connect to the switch through a means other than telnet (for example, SSH) and log in as admin.
2. Issue the following command:
configure telnetd
3. In response to the System Services prompt, enter
y
.
switch:admin> configure telnetd
Not all options will be available on an enabled switch.
To disable the switch, use the “switchDisable” command.
Configure...
ssl attributes (yes, y, no, n): [no]
http attributes (yes, y, no, n): [no]
snmp attributes (yes, y, no, n): [no]
rpcd attributes (yes, y, no, n): [no]
cfgload attributes (yes, y, no, n): [no]
[31454]: Read 1 license entries for generation 1.
[31454]: Read 1 license records.
System services (yes, y, no, n): [no] y
rstatd (on, off): [off]
rusersd (on, off): [off]
telnetd (on, off): [on] off