FTOS Configuration Guide for the C-Series - Force10 Networks

Each command in the procedure, above, has a “no” form of the command. Therefore, you have several
options for disabling email to a particular recipient, although each has its own ramifications:
• Using the no enable command stops messaging to the selected recipient, but does not remove the rest
of the server configuration.
• Using the no encrypt command stops encryption of FTMS emails to a selected server (recipient).
• Using the no keyadd public_key command removes the association of a particular encryption key from
a selected recipient.
• Using the no recipient email address command removes the recipient from the server configuration,
but the rest of the configuration remains so that you can enter a new recipient for the server.
• Using the no server name from the (conf-callhome) prompt removes the server configuration,
including the associated recipient. The one exception is the Force10 server, which you cannot remove,
but you can remove or modify the recipient and other settings.
Using the keyadd command
You have a choice of sending FTSA messages to individual email addresses in clear text or with
public-key/private key encryption (PGP 5 compatible).
To encrypt FTSA messages sent to Force10 TAC, you simply execute the encrypt command, which causes
a public key to be automatically installed on your SMTP server to provide and initiate that encryption.
To encrypt messages to other email addresses that you might set up:
1. Use a PGP 5-compatible program such as PGP or GnuPG to generate the public and private keys for a
specific recipient. The user name that you enter in the program should be the one that you will use as
the name value in the server command.
2. Export the public key into a file.
3. Upload the file into the switch flash memory (see the copy command in the FTOS Command
Reference) or other local device.
4. Select the key with the keyadd public_key command, where public_key is the filename of the key file
that you have uploaded to the switch. For example: keyadd flash://mykey.gpg.
To decrypt messages, copy the message into a file (for example “message1.pgp”) on the machine that has
your private key, and enter the command that your encryption program uses to decrypt messages, such as
“pgp message1.pgp”.
Note: When you disable FTSA (no call-home command), or when you reload the switch, all recipient
associations to their key files are erased.
FTOS Configuration Guide, version 7.7.1.0 659