Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Remote administration using Secure Shell
2-18 Administrator’s Overview
When configuring the SSH server you have the option to use
RSA/DSA authentication. If you use RSA/DSA authentication, the
authentication is accomplished via an exchange of public and private
keys between the server and the client. The downside of RSA/DSA
authentication is that it requires a bit more of an administrative effort.
If you elect NOT to use RSA/DSA authentication, the SSH clients must
enter their Sidewinder G2 user name and authentication information
when initiating the SSH connection.
The following sub-sections provide specific information on
configuring the Sidewinder G2 as an SSH server using RSA or DSA
authentication, as well as general information on configuring the SSH
server.
Configuring SSH when not using RSA/DSA authentication
If you are not using RSA/DSA authentication, follow the steps below
to configure SSH.
1. In the Admin Console, select Services Configuration -> Servers.
2. Select sshd in the list of server names, and click the Configuration tab.
3. Ensure that the Allow RSA Authentication field is disabled.
Rather than using RSA authentication, each client will be required to log
in using their Sidewinder G2 user name and authentication information.
4. Click the Control tab.
5. Enable the SSH server in the desired burbs, then click the Save icon.
6. [Conditional] If a Host Key Pair does not exist, you will be prompted by
the Admin Console to confirm that the Admin Console will create an
SSH host key. Click Yes.
7. Configure and enable the authentication method you want to use to
authenticate SSH sessions. See Chapter 9 for information.
8. Create an SSHD rule that allows SSH clients to log into this Sidewinder
G2 using SSH.
In the rule, select the following options: Service Type= server,
Service = sshd. You will also need to select the authentication method
you enabled in step 7. See “Creating proxy rules” on page 7-4 for
information on creating a proxy rule using the Admin Console.
Note: If the client has previously established an SSH connection to the Sidewinder
G2, the information associated with the previous connection must be deleted from
the client.