HP ProCurve 3400cl-24G Access Security Guide

7
Configuring Secure Shell (SSH)
Contents
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-3
Prerequisite for Using SSH . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5
Public Key Formats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-5
Steps for Configuring and Using SSH
for Switch and Client Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-6
General Operating Rules and Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-8
Configuring the Switch for SSH Operation . . . . . . . . . . . . . . . . . . . . . . . . . . 7-9
1. Assigning a Local Login (Operator) and
Enable (Manager) Password
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-9
2. Generating the Switch’s Public and Private Key Pair . . . . . . . . . . 7-10
3. Providing the Switch’s Public Key to Clients . . . . . . . . . . . . . . . . . . 7-12
4. Enabling SSH on the Switch and Anticipating SSH Client Contact
Behavior
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-15
5. Configuring the Switch for SSH Authentication . . . . . . . . . . . . . . . 7-18
6. Use an SSH Client To Access the Switch . . . . . . . . . . . . . . . . . . . . . 7-21
Further Information on SSH Client Public-Key Authentication . . . . . . . . 7-22
Messages Related to SSH Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-27
7-1

HP ProCurve 3400cl-24G Specifications

General

Ports	24
Uplink Ports	4
Switching Capacity	48 Gbps
Forwarding Rate	35.7 Mpps
Manageable	Yes
Jumbo Frame Support	Yes
Power Supply	Internal power supply
Routing Protocol	RIP-1, RIP-2, static IP routing
Management	Web-based, CLI, SNMP
Features	Quality of Service (QoS), VLAN support, Layer 3 switching
Compliant Standards	IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.1Q, IEEE 802.1p, IEEE 802.3ad, IEEE 802.1x, IEEE 802.1w, IEEE 802.1s
Operating Temperature	0 to 50 °C
Operating Humidity	10% to 90% (non-condensing)