Cisco Catalyst 2960-X User Manual

SSH and Switch Access
Secure Shell (SSH) is a protocol that provides a secure, remote connection to a device. SSH provides more
security for remote connections than Telnet does by providing strong encryption when a device is authenticated.
This software release supports SSH Version 1 (SSHv1) and SSH Version 2 (SSHv2).
SSH functions the same in IPv6 as in IPv4. For IPv6, SSH supports IPv6 addresses and enables secure,
encrypted connections with remote IPv6 nodes over an IPv6 transport.
SSH Servers, Integrated Clients, and Supported Versions
The Secure Shell (SSH) Integrated Client feature is an application that runs over the SSH protocol to provide
device authentication and encryption. The SSH client enables a Cisco device to make a secure, encrypted
connection to another Cisco device or to any other device running the SSH server. This connection provides
functionality similar to that of an outbound Telnet connection except that the connection is encrypted. With
authentication and encryption, the SSH client allows for secure communication over an unsecured network.
The SSH server and SSH integrated client are applications that run on the switch. The SSH server works with
the SSH client supported in this release and with non-Cisco SSH clients. The SSH client works with publicly
and commercially available SSH servers. The SSH client supports the ciphers of Data Encryption Standard
(DES), 3DES, and password authentication.
The switch supports an SSHv1 or an SSHv2 server.
The switch supports an SSHv1 client.
The SSH client functionality is available only when the SSH server is enabled.Note
User authentication is performed like that in the Telnet session to the device. SSH also supports the following
user authentication methods:
•
TACACS+
•
RADIUS
•
Local authentication and authorization
Related Topics
Configuring the Switch for Local Authentication and Authorization, on page 107
TACACS+ and Switch Access, on page 41
RADIUS and Switch Access, on page 59
SSH Configuration Guidelines
Follow these guidelines when configuring the switch as an SSH server or SSH client:
•
An RSA key pair generated by a SSHv1 server can be used by an SSHv2 server, and the reverse.
•
If the SSH server is running on a stack master and the stack master fails, the new stack master uses the
RSA key pair generated by the previous stack master.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 115
Configuring Secure Shell (SSH)
SSH and Switch Access

Cisco Catalyst 2960-X Specifications

General

Console port	RJ-45
USB 2.0 ports quantity	2
SFP module slots quantity	4
Installed SFP modules quantity	-
Gigabit Ethernet (copper) ports quantity	48
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Power source	AC
Input current	5 A
AC input voltage	100 - 240 V
Power consumption (typical)	60.9 W
Number of power supply units	1
Redundant power supply (RPS) support	Yes
Operating altitude	0 - 3000 m
Non-operating altitude	0 - 4000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	-5 - 40 °C
Operating relative humidity (H-H)	10 - 95 %
Switching protocols	UDP, TCP, RADIUS/TACACS+
Number of VLANs	1023
Networking standards	IEEE 802.1ab, IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ae, IEEE 802.3af, IEEE 802.3ah, IEEE 802.3at, IEEE 802.3az, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Throughput	107.1 Mpps
Jumbo frames	9216
Number of queues	8
MAC address table	16000 entries
Number of static routes	1000
DHCP features	DHCP server
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SNMP, SSH
Access Control List (ACL) rules	3
Switch type	Managed
Switch layer	L2/L3
Safety	UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1
Form factor	1U
Product color	Black
Total Power over Ethernet (PoE) budget	370 W
Power over Ethernet (PoE) ports quantity	24
Power over Ethernet plus (PoE+) ports quantity	12
Memory type	DRAM
Noise level	39 dB
Flash memory	128 MB
Internal memory	512 MB
Processor frequency	600 MHz
Mean time between failures (MTBF)	276870 h

Weight and Dimensions

Depth	368 mm
Width	445 mm
Height	45 mm
Weight	5800 g