Allied-telesis AT-S62 Manual de usuario Pagina 688
- Pagina / 760
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Chapter 34: Secure Shell (SSH) Protocol
Section VII: Management Security 688
SSH Overview
Secure management is increasingly important in modern networks, as
the ability to easily and effectively manage switches and the
requirement for security are two universal requirements. Switches are
often remotely managed using remote sessions via the Telnet protocol.
This method, however, has a serious security problem—it is only
protected by plaintext usernames and passwords which are vulnerable
to wiretapping and password guessing.
The Secure Shell (SSH) protocol provides encrypted and strongly
authenticated remote login sessions, similar to the Telnet and rlogin
protocols, between a host running a Secure Shell server and a machine
with a Secure Shell client.
The AT-S62 management software features Secure Shell server software
to enable network managers to securely manage the switch over an
insecure network. It offers the benefit of cryptographic authentication
and encryption. Secure Shell can replace Telnet for remote management
sessions.
Support for SSH The AT-S62 management software implementation of the SSH protocol
is compliant with SSH1 (versions 1.3 and 1.5) and SSH2 (version 2.0).
In addition, the following SSH options and features are supported:
❑ Inbound SSH connections (server mode) is supported.
❑ The following security algorithms are supported:
— 128-bit Advanced Encryption Standard (AES),
192-bit AES, and 256-bit AES
— Arcfour (RC4) security algorithm is supported.
— Triple-DES (3DES) encryption for SSH sessions is supported.
❑ RSA public keys with lengths of 512 to 2048 bits are supported.
Keys are stored in a format compatible with other Secure Shell
implementations, and mechanisms are provided to copy public
keys to and from the switch.
❑ Compression of SSH traffic.
The following SSH options and features are not supported:
❑ IDEA or Blowfish encryption
❑ Nonencrypted Secure Shell sessions
- Menus Interface 1
- User’s Guide 1
- Section II 5
- Section III 8
- Section IV 9
- Section V 10
- Virtual LANs 10
- Port Security 11
- Section VI 11
- Section VII 12
- Management Security 12
- Table of Contents 14
- List of Figures 15
- How This Guide is Organized 22
- Document Conventions 24
- Contacting Allied Telesyn 26
- Management Overview 28
- Local Management Session 30
- Telnet Management Session 31
- Chapter 1: Overview 32
- SNMP Management Session 33
- Management Access Levels 34
- Basic Operations 35
- Starting a Local or Telnet 36
- Management Session 36
- Starting a Local 38
- Enhanced 40
- Stacking 40
- Quitting a Local 40
- Quitting a Telnet 42
- Saving Your Parameter Changes 43
- Enhanced Stacking 44
- Enhanced Stacking Overview 45
- Chapter 3: Enhanced Stacking 46
- RS-232 TERMINAL PORT 47
- Returning to the 51
- Master Switch 51
- Basic Switch Parameters 52
- How Do You 54
- Assign an IP 54
- Address? 54
- Rebooting a Switch 61
- Changing the 62
- Manager or 62
- Operator 62
- Password 62
- Resetting the 63
- Setting the System Time 65
- D - Disabled) -> 67
- -> 600 68
- Configuring the Console Timer 70
- Pinging a Remote System 73
- Retaining the 74
- System Files 74
- Deleting the 75
- ° Celsius 79
- ° to 60° Celsius 79
- SNMPv1 and SNMPv2c 80
- SNMPv1 and SNMPv2c Overview 81
- Default SNMP 83
- Enter SNMP Manager IP Addr: 87
- Enter Trap Receiver IP Addr: 87
- Modifying a Community String 88
- Enter SNMP Community Name: 89
- Displaying Port Status 94
- Configuring Port Parameters 97
- Chapter 6: Port Parameters 100
- Setting the Rate Limit 106
- MAC Address Table 108
- MAC Address Overview 109
- Chapter 7: MAC Address Table 110
- Displaying MAC Addresses 111
- XXXXXXXXXXXX or XXXXXX XXXXXX 115
- Enter port-list: -> 115
- Changing the Aging Time 119
- Static and LACP Port Trunks 120
- Port Trunk Overview 121
- Chapter 8: Port Trunking 122
- LACP Trunk 123
- Overview 123
- Load Distribution 130
- Managing Static Port Trunks 133
- Create Trunk 135
- Modifying a Static 136
- Port Trunk 136
- Modify Trunk 137
- Deleting a Static 138
- Managing LACP Trunks 139
- Setting a LACP 140
- System Priority 140
- Creating an 141
- Aggregator 141
- Modifying an 143
- Deleting an 145
- Configuring 146
- LACP Port 146
- Parameters 146
- Displaying LACP 148
- Aggregator Status 148
- Port Mirroring 150
- Port Mirroring Overview 151
- Creating a Port Mirror 152
- Deleting a Port Mirror 154
- Ethernet Statistics 155
- Displaying Port Statistics 156
- Clearing Port Counters 158
- Advanced Operations 159
- File System 160
- File System Overview 161
- File Naming 162
- Conventions 162
- Creating a Boot 163
- Configuration 163
- Chapter 11: File System 164
- Enter the file name: 165
- Setting the Active 166
- Viewing a Boot 167
- Editing a Boot 168
- Troubleshooting 169
- Enter the source file name: 170
- Please wait 170
- Press any key 170
- Displaying System Files 172
- File Downloads and Uploads 174
- Downloading an 177
- AT-S62 Image 177
- Management 177
- TFTP Server IP address: 178
- Remote File Name: 178
- File received successfully! 178
- [Yes/No] 184
- Downloading a System File 188
- Downloading a 189
- File from a Local 189
- File from a Telnet 193
- Uploading a System File 195
- Uploading a File 196
- File sent successfully! 200
- Event Log and Syslog Servers 201
- Chapter 13: Event Log 202
- Managing the Event Log 203
- Displaying the 204
- Event Log 204
- Modifying the 209
- Event Log Full 209
- Saving the Event 210
- Clearing the 210
- Creating a Syslog 212
- Server Definition 212
- Modifying a 216
- Syslog Server 216
- Definition 216
- Deleting a Syslog 217
- Displaying a 218
- Classifiers 219
- Classifier Overview 220
- Chapter 14: Classifiers 222
- Classifier 226
- Guidelines 226
- Creating a Classifier 228
- Modifying a Classifier 231
- Deleting a Classifier 233
- Deleting All Classifiers 234
- Displaying Classifiers 235
- Access Control Lists 237
- Figure 72 ACL Example 2 241
- Figure 73 ACL Example 3 242
- Figure 76 ACL Example 6 244
- Creating an ACL 245
- Modifying an ACL 247
- Deleting an ACL 249
- Deleting All ACLs 251
- Displaying ACLs 252
- Quality of Service 253
- Quality of Service Overview 254
- QoS Policy 257
- Processing 257
- VLAN Tag User 259
- Priorities 259
- DiffServ Domain 260
- Examples Voice Applications 262
- Managing Flow Groups 269
- Modifying a Flow 271
- Deleting a Flow 272
- Displaying Flow 273
- Show Flow Groups 274
- Managing Traffic Classes 275
- Traffic Class 279
- Deleting a Traffic 280
- Displaying Traffic 280
- Show Traffic Classes 281
- Traffic Classes: 5 281
- Traffic Class Display 281
- Managing Policies 282
- Available Policy(ies): 0-4 285
- Displaying 286
- Policies 286
- Class of Service 288
- Class of Service Overview 289
- Chapter 17: Class of Service 290
- Configuring CoS 294
- Configuring Egress Scheduling 298
- IGMP Snooping 300
- IGMP Snooping Overview 301
- Chapter 18: IGMP Snooping 302
- Activating IGMP Snooping 303
- Denial of Service Defense 309
- Ping of Death 313
- Denial of Service 314
- Power Over Ethernet 318
- Power Over Ethernet Overview 319
- Prioritization 321
- PoE Device 322
- Setting the PoE Threshold 323
- Configuring PoE Port Settings 325
- Networking Stack 333
- Chapter 21: Networking Stack 334
- ARP Table 335
- Deleting an ARP 337
- Deleting All ARP 337
- Configuring the 338
- Timeout Value 338
- Displaying the Routing Table 339
- 169.254.37.1:23 342
- IP Address 342
- TCP Port 342
- Deleting a TCP Connection 344
- SNMPv3 Operations 347
- SNMPv3 Configuration 348
- SNMPv3 Overview 349
- Authentication 350
- Protocols 350
- SNMPv3 Privacy 351
- Protocol 351
- SNMPv3 MIB 351
- SNMPv3 Storage 352
- Notification 352
- SNMPv3 User Table 354
- SNMPv3 View Table 354
- SNMPv3 Access Table 354
- SNMPv3 User 360
- Table Entry 360
- Enter User (Security) Name: 362
- N-None]: 362
- Enter Privacy Password: 363
- [Yes/No]-> 364
- SNMPv3 View 370
- Enter View Name: 376
- 1.3.6.1.2.1.6 376
- SNMPv3 Access 379
- P-AuthPriv]: 381
- Enter Read View Name: 382
- Enter Write View Name: 382
- Enter Notify View Name: 382
- A-AuthNoPriv, P-AuthPriv]: 384
- Enter Group Name: 388
- SecurityToGroup 394
- Table Entr 398
- SNMPv3 Notify 402
- Enter Notify Name: 407
- SNMPv3 Target 410
- Address Table 410
- Enter Target Address Name: 415
- Enter IP Address: 415
- Enter Tag List: 418
- Enter Target Parameters: 419
- Parameters Table 423
- Enter Target Parameters Name: 424
- Community 436
- Enter Security Name: 438
- Enter Transport Tag: 438
- Enter Community Index: 442
- Displaying SNMPv3 Table Menus 445
- Display SNMPv3 447
- View Table Menu 447
- Access Table 448
- Notify Table 450
- Target Address 451
- Table Menu 451
- Spanning Tree Protocols 454
- Tree Protocols 455
- STP and RSTP Overview 456
- Bridge Priority 457
- Chapter 23: STP and RSTP 458
- Edge Port 463
- Mixed STP and 464
- RSTP Network 464
- Spanning Tree 464
- Configuring STP 468
- Port Settings 470
- Displaying STP 472
- Configuring RSTP 473
- RSTP Port 475
- Settings 475
- Displaying Port 477
- RSTP Status 477
- Chapter 24 478
- MSTP Overview 479
- Multiple 480
- Instance (MSTI) 480
- AT- 8524M 481
- VLAN and MSTI 484
- Associations 484
- Ports in Multiple 484
- AT-8524M 486
- MSTP with STP 489
- Summary of 489
- AT-8524M AT-8524M 493
- Configuring the CIST Priority 497
- 4096]: [0 to 15] -> 498
- 4096] [0 to 15] -> 8 500
- Associating VLANs to MSTI IDs 502
- Adding VLAN 503
- Associations to an 503
- Enter the list of VLANs: 504
- Removing All 505
- Associations from 505
- Generic MSTP 506
- MSTI-specific 508
- Port Parameters 508
- Chapter 25 513
- VLAN Overview 514
- Section V: Virtual LANs 515 515
- Port-based VLAN Overview 516
- Section V: Virtual LANs 517 517
- Section V: Virtual LANs 518 518
- Port-based 519
- Example 1 519
- Section V: Virtual LANs 520 520
- Example 2 521
- Section V: Virtual LANs 522 522
- Tagged VLAN Overview 523
- Section V: Virtual LANs 524 524
- General Rules for 525
- Creating a 525
- Tagged VLAN 525
- Section V: Virtual LANs 527 527
- Section V: Virtual LANs 528 528
- Section V: Virtual LANs 529 529
- Section V: Virtual LANs 530 530
- Section V: Virtual LANs 531 531
- Section V: Virtual LANs 532 532
- Section V: Virtual LANs 533 533
- Modifying a VLAN 534
- Section V: Virtual LANs 535 535
- Press any key to continue 536
- Section V: Virtual LANs 537 537
- Displaying VLANs 538
- Deleting a VLAN 539
- Section V: Virtual LANs 540 540
- Section V: Virtual LANs 541 541
- Deleting All VLANs 542
- Section V: Virtual LANs 543 543
- Section V: Virtual LANs 544 544
- Disable) -> 545
- Specifying a Management VLAN 546
- Press any key to continue 547
- Chapter 26 548
- Section V: Virtual LANs 549 549
- Section V: Virtual LANs 551 551
- GVRP and 552
- Network Security 552
- GVRP-inactive 553
- Intermediate 553
- Switches 553
- Section V: Virtual LANs 554 554
- Section V: Virtual LANs 555 555
- Section V: Virtual LANs 556 556
- Section V: Virtual LANs 557 557
- Configuring GVRP 558
- > 1000 559
- Section V: Virtual LANs 560 560
- Section V: Virtual LANs 561 561
- Your changes are saved 562
- Section V: Virtual LANs 563 563
- Section V: Virtual LANs 564 564
- Section V: Virtual LANs 565 565
- Section V: Virtual LANs 566 566
- Section V: Virtual LANs 567 567
- Section V: Virtual LANs 568 568
- Section V: Virtual LANs 569 569
- GIP Connected 570
- Ports Ring 570
- GVRP State 571
- Section V: Virtual LANs 572 572
- Section V: Virtual LANs 573 573
- Multiple VLAN Modes 574
- Multiple VLAN Mode Overview 575
- Section V: Virtual LANs 576 576
- Section V: Virtual LANs 577 577
- Non-802.1Q 578
- Compliant 578
- Multiple VLAN 578
- Selecting a VLAN Mode 579
- Displaying VLAN Information 580
- Protected Ports VLANs 581
- Protected Ports VLAN Overview 582
- Section V: Virtual LANs 583 583
- Protected Ports 584
- VLAN Guidelines 584
- Enter new value -> 585
- Section V: Virtual LANs 586 586
- Enter Group Number -> 587
- Section V: Virtual LANs 588 588
- Section V: Virtual LANs 589 589
- Section V: Virtual LANs 592 592
- Section V: Virtual LANs 594 594
- Section V: Virtual LANs 596 596
- MAC Address Security 598
- MAC Address Security Overview 599
- Security 600
- Violations and 600
- Intrusion Actions 600
- Section VI: Port Security 601 601
- Section VI: Port Security 602 602
- Section VI: Port Security 603 603
- Disable): 604
- Section VI: Port Security 605 605
- Section VI: Port Security 606 606
- Chapter 30 607
- Section VI: Port Security 608 608
- Section VI: Port Security 610 610
- Fast Ethernet Switch 611
- Accounting 612
- Section VI: Port Security 613 613
- Port-based Access 614
- Section VI: Port Security 615 615
- Section VI: Port Security 616 616
- Section VI: Port Security 617 617
- Setting Port Roles 618
- Section VI: Port Security 619 619
- Section VI: Port Security 620 620
- Section VI: Port Security 621 621
- Section VI: Port Security 622 622
- Section VI: Port Security 623 623
- Section VI: Port Security 624 624
- Section VI: Port Security 625 625
- Section VI: Port Security 626 626
- Configuring RADIUS Accounting 627
- Section VI: Port Security 628 628
- Web Server 630
- Web Server Overview 631
- General Steps to 632
- Web Server for 632
- Encryption 632
- Configuring the Web Server 634
- [1 to 2] -> 635
- Enter SSL Key ID -> 635
- Encryption Keys 636
- Basic Overview 637
- Encryption Key 638
- Technical Overview 639
- Chapter 32: Encryption Keys 640
- Key Exchange 642
- Algorithms 642
- Creating an Encryption Key 644
- Enter new Description -> 647
- Deleting an Encryption Key 648
- Modifying an Encryption Key 649
- Exporting an Encryption Key 650
- Importing an Encryption Key 652
- Chapter 33 654
- Distinguished 656
- Elements of a 664
- Public Key 664
- Infrastructure 664
- Certificate 665
- Validation 665
- Revocation Lists 666
- Implementation 666
- Switch 12 - sw12.cer 673
- Modifying a Certificate 675
- Deleting a Certificate 677
- Viewing a Certificate 678
- ...Done 683
- 12.csr] 683
- Configuring PKI 685
- Configuring SSL 686
- Secure Shell (SSH) Protocol 687
- SSH Overview 688
- Configuring SSH 691
- Configuring the SSH Server 692
- Displaying SSH Information 694
- RADIUS and TACACS+ 696
- Authentication Protocols 696
- TACACS+ and RADIUS Overview 697
- Disabled) -> 703
- RADIUS Status 706
- Chapter 36 707
- Parts of a 708
- ACL Guidelines 709
- ACL Examples 710
- Creating a Management ACL 712
- Enter the Protocol [TCP]: 713
- AT-S62 Default Settings 715
- Basic Switch Default Settings 717
- RS-232 Port 718
- Default Settings 718
- SNTP Default 718
- Administration 719
- System Software 719
- Switch State Slave 721
- Event Log Default Settings 722
- GVRP Default Settings 723
- Control List 726
- Status Disabled 726
- PKI Default Settings 727
- SNMP Default Settings 734
- MSTP Default 736
- SSH Default Settings 737
- SSL Default Settings 738
- VLAN Default Settings 739
- Web Server Default Settings 740
- SNMPv3 Configuration Examples 741
- Worksheet 744
Relacionado con productos y manuales para Hardware De La Computadora Allied-telesis AT-S62
Hardware De La Computadora Allied-telesis AR700 SERIES Software Release 2.7.1 Manual de usuario
(118 paginas)
(118 paginas)
Hardware De La Computadora Allied-telesis AR400 SERIES Software Release 2.7.1 Manual de usuario
(134 paginas)
(134 paginas)
Hardware De La Computadora Allied-telesis AT-VIEW PLUS 3.1 MIB COMPILER Manual de usuario
(14 paginas)
(14 paginas)
Hardware De La Computadora Allied-telesis AT-VIEW PLUS 3.1 DEVICE MANAGER Manual de usuario
(118 paginas)
(118 paginas)
Hardware De La Computadora Allied-telesis AT-VIEW PLUS 3.1 VLAN MANAGER Manual de usuario
(56 paginas)
(56 paginas)
Hardware De La Computadora Allied-telesis AT-VIEW PLUS 3.1 INSTALLATION Manual de usuario
(26 paginas)
(26 paginas)
Hardware De La Computadora Allied-telesis AT-VIEW PLUS 3.0 INSTALLATION Manual de usuario
(26 paginas)
(26 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.059 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales