HP 4100GL User Manual

Page 101

Advertising
background image

Configuring Secure Shell (SSH)

Configuring the Switch for SSH Operation

[port < 1-65535 | default >]

The TCP port number for SSH connections (default:
22). Important: See “Note on Port Number” on page
4-17
.

[timeout < 5 - 120 >]

The SSH login timeout value (default: 120 seconds).

[version <1 | 2 | 1-or-2 >

The version of SSH to accept connections from.
(default: 1-or-2)

The

ip ssh key-size command affects only a per-session, internal server key the

switch creates, uses, and discards. This key is not accessible from the user
interface. The switch’s public (host) key is a separate, accessible key that is
always 896 bits.

N o t e o n P o r t

HP recommends using the default TCP port number (22). However, you can

N u m b e r

use

ip ssh port to specify any TCP port for SSH connections except those

reserved for other purposes. Examples of reserved IP ports are 23 (Telnet)
and 80 (http). Some other reserved TCP ports on the Series 4100GL switches
are 49, 80, 1506, and 1513.

The switch uses these five settings internally for
transactions with clients. See the Note, below.

Enables SSH on the switch.

Lists the current SSH
configuration and status.

With SSH running, the switch allows one console
session and up to three other sessions (SSH and/or
Telnet). Web browser sessions are also allowed, but
do not appear in the show ip ssh listing.

Figure 4-12. Example of Enabling IP SSH and Listing the SSH Configuration and Status

C a u t i o n

Protect your private key file from access by anyone other than yourself. If
someone can access your private key file, they can then penetrate SSH security
on the switch by appearing to be you.

4-17

Advertising