Dell PowerEdge VRTX Chassis Management Controller Version 1.0 for Dell PowerEd - Page 124

Using SSH With CMC, Supported SSH Cryptography Schemes, Chassis - reviews

Get Dell PowerEdge VRTX PDF manuals and user guides View all Dell PowerEdge VRTX manuals
Add to My Manuals
Save this manual to your list of manuals

Page 124 highlights

If your management station is running Microsoft Windows XP or Microsoft Windows Server 2003, you may experience an issue with the characters in a CMC Telnet session. This issue may occur as a frozen login where the return key does not respond and the password prompt does not appear. To fix this issue, download hotfix 824810 from support.microsoft.com. For more information, you can also see Microsoft Knowledge Base article 824810. Using SSH With CMC SSH is a command line session that includes the same capabilities as a Telnet session, but with session negotiation and encryption to improve security. CMC supports SSH version 2 with password authentication. SSH is enabled on the CMC by default. NOTE: CMC does not support SSH version 1. When an error occurs during the CMC login, the SSH client issues an error message. The message text is dependent on the client and is not controlled by CMC. Review the RACLog messages to determine the cause of the failure. NOTE: OpenSSH must be run from a VT100 or ANSI terminal emulator on Windows. You can also run OpenSSH using Putty.exe. Running OpenSSH at the Windows command prompt does not provide full functionality (that is, some keys do not respond and no graphics are displayed). On servers that run Linux, run SSH client services to connect to CMC with any shell. Four simultaneous SSH sessions are supported at a time. The session timeout is controlled by the cfgSsnMgtSshIdleTimeout property. For more information about the RACADM commands, see the Chassis Management Controller for PowerEdge VRTX RACADM Command Line Reference Guide available at dell.com/support/ Manuals. CMC also supports Public Key Authentication (PKA) over SSH. This authentication method improves SSH scripting automation by removing the need to embed or prompt for user ID/password. For more information, see Configuring Public Key Authentication over SSH. SSH is enabled by default. If SSH is disabled, then you can enable it using any other supported interface. To configure SSH, see Configuring Services. Supported SSH Cryptography Schemes To communicate with CMC using SSH protocol, it supports multiple cryptography schemes listed in the following table. Table 22. Cryptography Schemes Scheme Type Scheme Asymmetric Cryptography Diffie-Hellman DSA/DSS 512-1024 (random) bits per NIST specification Symmetric Cryptography • AES256-CBC • RIJNDAEL256-CBC • AES192-CBC • RIJNDAEL192-CBC • AES128-CBC • RIJNDAEL128-CBC • BLOWFISH-128-CBC • 3DES-192-CBC 124

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
If your management station is running Microsoft Windows XP or Microsoft Windows Server 2003, you may experience
an issue with the characters in a CMC Telnet session. This issue may occur as a frozen login where the return key does
not respond and the password prompt does not appear.
To fix this issue, download hotfix 824810 from
support.microsoft.com
. For more information, you can also see Microsoft
Knowledge Base article 824810.
Using SSH With CMC
SSH is a command line session that includes the same capabilities as a Telnet session, but with session negotiation and
encryption to improve security. CMC supports SSH version 2 with password authentication. SSH is enabled on the CMC
by default.
NOTE:
CMC does not support SSH version 1.
When an error occurs during the CMC login, the SSH client issues an error message. The message text is dependent on
the client and is not controlled by CMC. Review the RACLog messages to determine the cause of the failure.
NOTE:
OpenSSH
must be run from a VT100 or ANSI terminal emulator on Windows. You can also run
OpenSSH
using
Putty.exe
. Running
OpenSSH
at the Windows command prompt does not provide full functionality (that is,
some keys do not respond and no graphics are displayed). On servers that run Linux, run SSH client services to
connect to CMC with any shell.
Four simultaneous SSH sessions are supported at a time. The session timeout is controlled by the
cfgSsnMgtSshIdleTimeout
property. For more information about the RACADM commands, see the
Chassis
Management Controller for PowerEdge VRTX RACADM Command Line Reference Guide
available at dell.com/support/
Manuals.
CMC also supports Public Key Authentication (PKA) over SSH. This authentication method improves SSH scripting
automation by removing the need to embed or prompt for user ID/password. For more information, see
Configuring
Public Key Authentication over SSH
.
SSH is enabled by default. If SSH is disabled, then you can enable it using any other supported interface.
To configure SSH, see
Configuring Services
.
Supported SSH Cryptography Schemes
To communicate with CMC using SSH protocol, it supports multiple cryptography schemes listed in the following table.
Table 22. Cryptography Schemes
Scheme Type
Scheme
Asymmetric Cryptography
Diffie-Hellman DSA/DSS 512–1024 (random) bits per NIST
specification
Symmetric Cryptography
•
AES256-CBC
•
RIJNDAEL256-CBC
•
AES192-CBC
•
RIJNDAEL192-CBC
•
AES128-CBC
•
RIJNDAEL128-CBC
•
BLOWFISH-128-CBC
•
3DES-192-CBC
124