Home » D-Link Manuals » Hubs & Switches » D-Link 3100 24 » Manual Viewer

D-Link 3100 24 User Manual - Page 123

Defining SSH Algorithm Settings, Public Key Algorithm, Data Integrity Algorithm, Encryption Algorithm

UPC - 790069305122

Add to My Manuals
Save this manual to your list of manuals

Page 123 highlights

DGS-3100 Series Gigabit Stackable Managed Switch User Manual 3. Define the SSH global setting port number in the Port (1-65535) field. 4. Click . The SSH configuration is defined, and the device is updated. Defining SSH Algorithm Settings This SSH Algorithm Settings Page allows network administrators to enable a public key for SSH authentication encryption. The following authentication keys are enabled for SSH: • Public Key Algorithm - Encrypts a cryptographic key pair composed of a public key and a private key. The private key is kept secret, while the public key can be distributed. The encryption keys are mathematically similar, but a private key cannot be derived from the public key. Messages encrypted with a public key can be decrypted with the matching private key. The following Public Key Algorithms are supported: - HMAC-RSA - Supports the Hash for Message Authentication Code (HMAC) mechanism utilizing the RSA encryption algorithm. - HMAC-DSA -Supports the Hash for Message Authentication Code (HMAC) Digital Signature Algorithm (DSA) encryption algorithm. • Data Integrity Algorithm - Validates message authentication information transmitted between two parties which share the same key. The following Data Integrity Algorithms are supported: - HMAC-SHA - Supports the Hash for Message Authentication Code (HMAC) Secure Hash Algorithm (SHA) mechanism. - HMAC MD5 - Supports the Hash for Message Authentication Code (HMAC) MD5 Message Digest (MD5) mechanism. • Encryption Algorithm - Generates authentication keys used to authenticate communications between different applications. The following Encryption Algorithms are supported - 3DES-CBC - Supports a block size of 8 bytes (64 bits); its key size is 192 bits long. The first 8 bytes cannot be identical to the second 8 bytes, and the second 8 bytes cannot be identical to the third 8 bytes. - AES128 -Provides a block cipher that encrypts and decrypts digital information. The AES128 algorithm is capable of using cryptographic 128 keys. - AES192 - Provides a block cipher that encrypts and decrypts digital information. The AES192 algorithm is capable of using cryptographic 192 keys. - AES256 - Provides a block cipher that encrypts and decrypts digital information. The AES256 algorithm is capable of using cryptographic 256 keys. - RC4 - Supports a cipher with an up to 2048 bits key size. 111

Section	Page
Preface	6
System Overview	7
Viewing the Device	7
DGS-3100 Series Front Panel	7
DGS-3100 Series Front Panel	7
Device Management Methods	8
User Guide Overview	9
Notes, Notices, and Cautions	9
Safety Cautions	9
General Precautions for Rack-Mountable Products	11
GETTING STARTED	13
Using the Web-Based User Interface	13
Understanding the D-Link Embedded Web Interface	13
Using the Tool Menu	15
Displaying the Stack Status	15
Locating Devices	15
Backing up and Restoring Configuration Files	16
Resetting the Device	17
Downloading the Firmware	18
Rebooting the System	20
Using the Web System Components	21
CONFIGURING BASIC CONFIGURATION	22
Viewing Device Information	23
Defining System Information	25
Defining IP Addresses	26
Managing Stacking	27
Managing Stacking Modes	27
Advanced Stacking	27
Stack Startup Process	29
Building Stacks – Quick Start	31
Stack Management Examples	32
Configuring Stacking	38
Defining Ports	39
Configuring Port Properties	39
Viewing Port Properties	41
ARP Settings	42
Configuring User Accounts	43
Managing System Logs	45
Configuring SNTP	46
Configuring Daylight Savings Time	48
Configuring SNMP	52
Defining SNMP Views	53
Defining SNMP Groups	54
Defining SNMP Users	56
Defining SNMP Communities	58
Defining SNMP Host Table	59
Defining SNMP Engine ID	61
Enabling SNMP Traps	62
DHCP Auto Configuration	63
Dual Image Services	64
Firmware Information	64
Config Firmware Image	65
CONFIGURING L2 FEATURES	66
Enabling Jumbo Frames	67
Configuring VLANs	68
Understanding IEEE 802.1p Priority	68
VLAN Description	68
Notes about VLANs on the DGS-3100 Series	68
IEEE 802.1Q VLANs	68
802.1Q VLAN Tags	70
Port VLAN ID	71
Tagging and Untagging	71
Ingress Filtering	71
Default VLANs	72
VLAN and Trunk Groups	72
VLAN Status	72
Defining VLAN Properties	73
Configuring GVRP	75
Defining Trunking	77
Traffic Segmentation	79
Configuring LACP	80
Defining IGMP Snooping	81
Configuring Port Mirroring	84
Configuring Spanning Tree	86
Defining Spanning Tree Global Parameters	87
Defining STP Port Settings	89
Defining Multiple Spanning Tree Configuration Identification	91
Defining MSTP Port Information	92
Defining Forwarding and Filtering	94
Defining Unicast Forwarding	94
Defining Multicast Forwarding	95
CONFIGURING QUALITY OF SERVIC	97
Understanding QoS	99
Defining Bandwidth Settings	100
Configuring Storm Control	101
Mapping Ports to Packet Priorities	102
Mapping Priority to Classes (Queues)	103
Configuring QoS Scheduling Mechanism	104
Defining Multi-Layer CoS Settings	105
SECURITY FEATURES	106
Configuring Safeguard Engine	107
Configuring Trust Host	108
Configuring Port Security	109
Configuring Guest VLANs	110
Configuring Port Authentication 802.1X	111
Configuring MAC Authentication (by using Guest VLAN, 802.1X and Radius pages)	116
Defining RADIUS Settings	119
Configuring Secure Socket Layer Security	120
Configuring Secure Shell Security	122
Defining SSH Algorithm Settings	123
Defining Application Authentication Settings	125
Configuring Authentication Server Hosts	126
Defining Login Methods	127
Defining Enable Methods	129
Configuring Local Enable Password	131
MONITORING THE DEVICE	132
Viewing Stacking Information	133
Viewing CPU Utilization	134
Viewing Port Utilization	135
Viewing Packet Size Information	136
Viewing Received Packet Statistics	137
Viewing UMB_cast Packet Statistics	138
Viewing Transmitted Packet Statistics	139
Viewing RADIUS Authenticated Session Statistics	141
Viewing ARP Table	142
Viewing Router Ports	143
Viewing Session Table	144
Viewing IGMP Group Information	145
Defining Dynamic and Static MAC Addresses	146
Viewing System Log	148
MANAGING POWER OVER ETHERNET DEVICES	149
Defining PoE System Information	150
Displaying and Editing PoE System Information	152
DEFINING ACCESS PROFILE LISTS	153
ACL Configuration Wizard	154
Defining Access Profile Lists	156
Defining Access Rules Lists	169

Match case Limit results 1 per page

DGS-3100 Series Gigabit Stackable Managed Switch User Manual

Define the SSH global setting port number in the

Port (1-65535)

field.

Click

. The SSH configuration is defined, and the device is updated.

Defining SSH Algorithm Settings

This

SSH Algorithm Settings Page

allows network administrators to enable a public key for SSH authentication encryption.

The following authentication keys are enabled for SSH:

•

Public Key Algorithm

— Encrypts a cryptographic key pair composed of a public key and a private key. The private

key is kept secret, while the public key can be distributed. The encryption keys are mathematically similar, but a private

key cannot be derived from the public key. Messages encrypted with a public key can be decrypted with the matching

private key. The following Public Key Algorithms are supported:

–

HMAC-RSA

— Supports the

Hash for Message Authentication Code

(HMAC) mechanism utilizing the RSA

encryption algorithm.

–

HMAC-DSA

—Supports the Hash for Message Authentication Code (HMAC) Digital Signature Algorithm

(DSA) encryption algorithm.

•

Data Integrity Algorithm

— Validates message authentication information transmitted between two parties which

share the same key. The following Data Integrity Algorithms are supported:

–

HMAC-SHA

— Supports the Hash for Message Authentication Code (HMAC) Secure Hash Algorithm (SHA)

mechanism.

–

HMAC MD5

— Supports the Hash for Message Authentication Code (HMAC) MD5 Message Digest (MD5)

mechanism.

•

Encryption Algorithm

— Generates authentication keys used to authenticate communications between different

applications. The following Encryption Algorithms are supported

–

3DES-CBC

—

Supports a block size of 8 bytes (64 bits); its key size is 192 bits long. The first 8 bytes cannot

be identical to the second 8 bytes, and the second 8 bytes cannot be identical to the third 8 bytes.

–

AES128

—

Provides a block cipher that encrypts and decrypts digital information. The AES128 algorithm is

capable of using cryptographic 128 keys.

–

AES192

—

Provides a block cipher that encrypts and decrypts digital information. The AES192 algorithm is

capable of using cryptographic 192 keys.

–

AES256

— Provides a block cipher that encrypts and decrypts digital information. The AES256 algorithm is

capable of using cryptographic 256 keys.

–

RC4

—

Supports a cipher with an up to 2048 bits key size.

111