OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Recommendations

Info

Using Secure Shell Logging Into the Switch Authentication Phase When the client tries to authenticate, the server determines the process used by telling the client which authentication methods can be used. The client has the freedom to attempt several methods listed by the server. The server will disconnect itself from the client if a certain number of failed authentications are attempted or if a time-out period expires. Authentication is performed independent of whether the Secure Shell interface or the SFTP file transfer protocol will be implemented. Connection Phase After successful authentication, both the client and the server process the Secure Shell connection protocol. Using Secure Shell Public Key Authentication (PKA) Generating and copying Keys The following procedure is used to set up Secure Shell PKA between an OmniSwitch and a client device. The steps below use a userid of “new_ssh_user” on the OmniSwitch as an example: Note: A comment must be provided when generating the public key (ex. remote_ssh_user@device) and the key must be in the format show below. Example Key: ssh-rsa AAAAB3NzaC1yc2EAAkjgnivubn9872435nsdg8dfsgfd8dfgfd7Rah1sqeyh6 v3v6Hji4sOXwn+jdhAHJTM2Iq1RjwccObEdYc67VM9+2ZwEipJI5HYl1qbYKTA0em0kwK HNa+naIkWsTSwNj81HaAkaL21LMhcHnRytBfTeyySLgNHxy6VFX1ipMN3pdtQbJn0cfRI evyxroMs7S+nMvhtr1lhrRzNaC3iW9OIskS9zNjKUd2Becj5+Bt1JHmlqu3Is9H67kySd HeF1XTMVWHDo30n9msA1vB7Bqo1w26qzV3S97vbhrApQtYJAn0bIilVIAEasIYIbqrkTQ /kmDO4uMpCDgZKta7bP+P3CjBrGmK1w98 remote_ssh_user@device 1 Use the ssh-keygen utility of the OpenSSH software suite to generate a private and public key pair as show below: #ssh-keygen -t rsa -C remote_ssh_user@device 2 Save the private key on the client device. 3 Copy the the public key to the switch in the preferred directory. Including the user id as part of the filename can help identify the different keys: #scp ~/.ssh/new_ssh_user_rsa.pub admin@192.168.2.1:/flash/system 4 Verify that the userid that will use SSH is a valid user name on the OmniSwitch. If the username does not already exist on the switch create the user name with the appropriate privileges. 5 Install the public key on the OmniSwitch for the specified user. -> installsshkey new_ssh_user /flash/system/new_ssh_user_rsa.pub page 1-14 OmniSwitch AOS Release 8 Switch Management Guide May 2014
Logging Into the Switch Using Secure Shell 6 Connect to the OmniSwitch using SSH with PKA. #ssh -o PreferredAuthentications=publickey new_ssh_user@192.168.2.1 –v Note. By default if PKA fails, the user is prompted for a password. This is the password that was specified when the user name was created on the OmniSwitch. 7 (Optional). To enforce Secure Shell PKA on a switch and not prompt for a password use the ssh enforce-pubkey-auth command. Revoking a Key The following procedure can be used to revoke a key: ->revokesshkey new_ssh_user remote_ssh_user@192.168.10.1 Starting a Secure Shell Session from the OmniSwitch To start a Secure Shell session, issue the ssh command and identify the IP address or hostname for the device you are connecting to. The following command establishes a Secure Shell interface from the local OmniSwitch to a remote device: -> ssh 198.51.100.50 login as: You must have a login and password that is recognized by the IP address you specify. When you enter your login, the device you are logging in to, will request your password as shown here: -> ssh 198.51.100.50 Password: Welcome to the Alcatel-Lucent 6860 8.1.1.R01, April 26, 2014. Copyright (c) 1994-2014 Alcatel-Lucent. All Rights Reserved. OmniSwitch(tm) is a trademark of Alcatel-Lucent, registered in the United States Patent and Trademark Office. Once the Secure Shell session is established, you can use the remote device specified by the IP address on a secure connection from your OmniSwitch. Note. The login parameters for Secure Shell session login parameters can be affected by the session login-attempt and session login-timeout CLI commands. OmniSwitch AOS Release 8 Switch Management Guide May 2014 page 1-15
Page 1 and 2: Part No. 060391-10, Rev. A May 2014
Page 3 and 4: Contents About This Guide .........
Page 5 and 6: Contents Using the Switch as an FTP
Page 7 and 8: Contents Account and Password Polic
Page 9 and 10: Contents Authentication Trap ......
Page 11 and 12: Contents Firmware Upgrade Files ...
Page 13 and 14: About This Guide This OmniSwitch AO
Page 15 and 16: About This Guide Documentation Road
Page 17 and 18: About This Guide Related Documentat
Page 19 and 20: 1 Logging Into the Switch Logging i
Page 21 and 22: Logging Into the Switch Quick Steps
Page 23 and 24: Logging Into the Switch Overview of
Page 25 and 26: Logging Into the Switch Accessing t
Page 27 and 28: Logging Into the Switch Setting the
Page 29 and 30: Logging Into the Switch Using Secur
Page 31: Logging Into the Switch Using Secur
Page 35 and 36: Logging Into the Switch Modifying t
Page 37 and 38: Logging Into the Switch Enabling th
Page 39 and 40: Logging Into the Switch Enabling th
Page 41 and 42: 2 Managing System Files This chapte
Page 43 and 44: Managing System Files Switch Admini
Page 45 and 46: Managing System Files File and Dire
Page 53 and 54: Managing System Files Loading Softw
Page 55 and 56: Managing System Files Loading Softw
Page 57 and 58: Managing System Files Setting the S
Page 59 and 60: Managing System Files Setting the S
Page 61 and 62: 3 Managing CMM Directory Content Th
Page 63 and 64: Managing CMM Directory Content CMM
Page 69 and 70: Managing CMM Directory Content Mana
Page 75 and 76: Managing CMM Directory Content Usin
Page 77 and 78: 4 Using the CLI Alcatel-Lucent’s
Page 79 and 80: Using the CLI Command Entry Rules a
Page 81 and 82: Using the CLI Command Help -> sh vl
Page 83 and 84:
Using the CLI Logging CLI Commands
Page 85 and 86:
Using the CLI Customizing the Scree
Page 87 and 88:
5 Working With Configuration Files
Page 89 and 90:
Working With Configuration Files Tu
Page 91 and 92:
Working With Configuration Files Qu
Page 93 and 94:
Working With Configuration Files Co
Page 95 and 96:
Working With Configuration Files Cr
Page 97 and 98:
Working With Configuration Files Cr
Page 99 and 100:
6 Managing Switch User Accounts Swi
Page 101 and 102:
Managing Switch User Accounts User
Page 103 and 104:
Managing Switch User Accounts Overv
Page 105 and 106:
Managing Switch User Accounts Overv
Page 107 and 108:
Managing Switch User Accounts Creat
Page 109 and 110:
Managing Switch User Accounts Confi
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Managing Switch User Accounts Setti
Page 117 and 118:
Managing Switch User Accounts Multi
Page 119 and 120:
7 Managing Switch Security Switch s
Page 121 and 122:
Managing Switch Security Switch Sec
Page 123 and 124:
Managing Switch Security Authentica
Page 125 and 126:
Managing Switch Security Quick Step
Page 127 and 128:
Managing Switch Security Setting Up
Page 129 and 130:
Managing Switch Security Configurin
Page 131 and 132:
8 Using WebView The switch can be m
Page 133 and 134:
Using WebView WebView CLI Commands
Page 135 and 136:
Using WebView WebView Overview Conf
Page 137 and 138:
9 Using SNMP The Simple Network Man
Page 139 and 140:
Using SNMP Quick Steps for Setting
Page 141 and 142:
Using SNMP Quick Steps for Setting
Page 143 and 144:
Using SNMP SNMP Overview Using SNMP
Page 145 and 146:
Using SNMP Using SNMP For Switch Se
Page 147 and 148:
Using SNMP Using SNMP For Switch Se
Page 149 and 150:
Using SNMP Working with SNMP Traps
Page 151 and 152:
Using SNMP Verifying the SNMP Confi
Page 153 and 154:
10 Web Services, CLI Scripting, and
Page 155 and 156:
Web Services, CLI Scripting, and Op
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
11 Configuring Network Time Protoco
Page 183 and 184:
Configuring Network Time Protocol (
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
12 Managing Automatic Remote Config
Page 197 and 198:
Managing Automatic Remote Configura
Page 199 and 200:
Page 201 and 202:
Page 203 and 204:
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Page 211 and 212:
Page 213 and 214:
Page 215 and 216:
Page 217 and 218:
Page 219 and 220:
13 Configuring Virtual Chassis A Vi
Page 221 and 222:
Configuring Virtual Chassis Virtual
Page 223 and 224:
Configuring Virtual Chassis Quick S
Page 225 and 226:
Page 227 and 228:
Configuring Virtual Chassis Managin
Page 229 and 230:
Configuring Virtual Chassis Managin
Page 231 and 232:
Page 233 and 234:
Page 235 and 236:
Configuring Virtual Chassis Interac
Page 237 and 238:
Configuring Virtual Chassis Configu
Page 239 and 240:
Configuring Virtual Chassis Configu
Page 241 and 242:
Configuring Virtual Chassis Display
Page 243 and 244:
A Software License and Copyright St
Page 245 and 246:
Alcatel-Lucent License Agreement Al
Page 247 and 248:
B SNMP Trap Information This append
Page 249 and 250:
SNMP Traps Table No. Trap Name Obje
Page 251 and 252:
Page 253 and 254:
Page 255 and 256:
Page 257 and 258:
Page 259 and 260:
Page 261 and 262:
Page 263 and 264:
Page 265 and 266:
Page 267 and 268:
Page 269 and 270:
Page 271 and 272:
Page 273 and 274:
Page 275 and 276:
Page 277 and 278:
Page 279 and 280:
Page 281 and 282:
Page 283 and 284:
Page 285 and 286:
Page 287 and 288:
Page 289 and 290:
Page 291 and 292:
Page 293 and 294:
Index Symbols !! command 4-6 A aaa
Page 295 and 296:
Index Network Time Protocol see NTP
show all

OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Create successful ePaper yourself

Delete template?

Save as template?