To Next Page

To Previous Page

IPv6 Management Security Features

Secure Shell for IPv6

The Secure Shell (SSH) for IPv6 feature provides the same Telnet-like func-

tions through encrypted, authenticated transactions as SSH for IPv4. SSH for

IPv6 provides CLI (console) access and secure file transfer functionality. The

following types of transactions are supported:

■ Client public-key authentication

Public keys from SSH clients are stored on the switch. Access to the

switch is granted only to a client whose private key matches a stored

public key.

■ Password-only client authentication

The switch is SSH-enabled but is not configured with the login method

that authenticates a client’s public-key. Instead, after the switch authenti-

cates itself to a client, users connected to the client authenticate them-

selves to the switch by providing a valid password that matches the

operator- and/or manager-level password configured and stored locally on

the switch or on a RADIUS or TACACS+ server.

■ Secure Copy (SCP) and Secure FTP (SFTP)

You can use an SCP or SFTP client application to perform secure file

transfers to and from the switch.

Configuring SSH for IPv6

By default, SSH is automatically enabled for IPv4 and IPv6 connections on a

switch. As with SSH for IPv4, you can enter the ip ssh command to reconfigure

the default SSH settings to:

■ Restrict access to the SSH server running on the switch to only IPv4 or

IPv6 clients.

■ Modify the TCP port number and timeout period used in SSH authentica-

tion in IPv4 and IPv6 connections.

6-15

HP PROCURVE 2910AL Configuration Guide

Other manuals for HP PROCURVE 2910AL