D-Link 3312SR Reference Manual - Page 167

DGS-3312SR Layer 3 Gigabit Switch

161

22

SSH C

OMMANDS

The steps required to use the SSH protocol for secure communication between a remote PC (the SSH Client) and the Switch (the

SSH Server), are as follows:

±

Create a user account with admin-level access using the

create account admin <username> <password>

command.

This is identical to creating any other admin-lever User account on the Switch, including specifying a password. This

password is used to login to the Switch, once secure communication has been established using the SSH protocol.

±

Configure the user account to use a specified authorization method to identify users that are allowed to establish SSH

connections with the Switch using the

config ssh user authmode

command. There are three choices as to the method SSH

will use to authorize the user, and they are password, publickey and hostbased.

±

Configure the encryption algorithm that SSH will use to encrypt and decrypt messages sent between the SSH Client

and the SSH Server.

±

Finally, enable SSH on the Switch using the

enable ssh

command.

±

After following the above steps, you can configure an SSH Client on the remote PC and manage the Switch using

secure, in-band communication.

The Secure Shell (SSH) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in

the following table.

Command

Parameters

enable ssh

disable ssh

config ssh authmode

[password | publickey | hostbased] [enable | disable]

show ssh authmode

config ssh server

{maxsession <int 1-8> | contimeout <sec 120-600> | authfail

<int 2-20> | rekey [10min | 30min | 60min | never] port

<tcp_port_number 1-65535>}

show ssh server

config ssh user

<username> authmode {Hostbased [hostname <string> |

hostname_IP <string> <ipaddr>} | Password | Publickey |

None]

show ssh user authmode

config ssh algorithm

[3DES | AES128 | AES192 | AES256 | arcfour | blowfish |

cast128 | twofish128 | twofish192 | twofish256 | MD5 | SHA1

| DSA | RSA ] [enable | disable]

show ssh algorithm

Each command is listed, in detail, in the following sections.

enable shh

Purpose

Used to enable SSH.

Syntax

enable ssh

Description

This command allows you to enable SSH on the switch.

Parameters

None.

Restrictions

Only administrator-level users can issue this command.

Section	Page
Introduction	7
	7
	7
Accessing the Switch via the Serial Port	7
Setting the Switch’s IP Address	8
Using the Console CLI	10
	10
	10
Connecting to the Switch	10
Command Syntax	16
Basic Switch Commands	18
Switch Port Commands	30
Port Security Commands	33
Network Management (SNMP) Commands	37
Switch Utility Commands	58
Network Monitoring Commands	62
Multiple Spanning Tree Protocol (MSTP) Commands	75
Forwarding Database Commands	88
Broadcast Storm Control Commands	95
QoS Commands	97
Port Mirroring Commands	105
VLAN Commands	110
Link Aggregation Commands	117
IP Commands (Including IP Multinetting)	123
IGMP Commands	128
IGMP Snooping Commands	131
MAC Notification Commands	139
Access Authentication Control Commands	143
SSH Commands	167
SSL Commands	175
802.1X Commands	180
Access Control List (ACL) Commands	192
Traffic Segmentation Commands	201
Stacking Commands	203
D-Link Single IP Management Commands	206
Time and SNTP Commands	216
ARP Commands	222
VRRP Commands	226
Routing Table Commands	233
Route Redistribution Commands	237
BOOTP Relay Commands	243
DNS Relay Commands	247
RIP Commands	251
DVMRP Commands	254
PIM Commands	259
IP Multicasting Commands	263
MD5 Configuration Commands	265
OSPF Configuration Commands	268
Command History List	288
Technical Specifications	290
	296
	296
	296
	296
	296
	296
	296
Copyright Statement: No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Co	296

D-Link 3312SR Reference Manual - Page 167

SSH Commands, enable shh

Page 167 highlights