Dell 8 Fabric OS Administrator’s Guide - Page 158

6 Secure Copy TABLE 18 Protocol SSH SSL Secure protocol support Description Secure Shell (SSH) is a network protocol that allows data to be exchanged over a secure channel between two computers. Encryption provides confidentiality and integrity of data. SSH uses public-key cryptography to authenticate the remote computer and allow the remote computer to authenticate the user, if necessary. Fabric OS uses secure socket layer (SSL) to support HTTPS. A certificate must be generated and installed on each switch to enable SSL. Supports SSLv3, 128-bit encryption by default. Table 19 describes additional software or certificates that you must obtain to deploy secure protocols. TABLE 19 Items needed to deploy secure protocols Protocol Host side Switch side SSHv2 HTTPS SCP SNMPv1, SNMPv2, SNMPv3 Secure shell client None No requirement on host side Switch IP certificate for SSL except a browser that supports HTTPS SSH daemon, SCP server None None None The security protocols are designed with the four main use cases described in Table 20. TABLE 20 Main security scenarios Fabric Management interfaces Comments Nonsecure Nonsecure Secure Nonsecure Secure Secure Secure Nonsecure No special setup is needed to use Telnet or HTTP. Secure protocols may be used. An SSL switch certificate must be installed if HTTPS is used. Switches running earlier Fabric OS versions can be part of the secure fabric, but they do not support secure management. Secure management protocols must be configured for each participating switch. Nonsecure protocols may be disabled on nonparticipating switches. If SSL is used, then certificates must be installed. For more information on installing certificates, refer to "Installing a switch certificate" on page 125. You must use SSH because Telnet is not allowed with some features. Secure Copy The secure copy protocol (SCP) runs on port 22. It encrypts data during transfer, thereby avoiding packet sniffers that attempt to extract useful information during data transfer. SCP relies on SSH to provide authentication and security. 118 Fabric OS Administrator's Guide 53-1001763-02