Netgear XCM8806 Chassis User Manual - Page 505

NETGEAR 8800 User Manual • Viewing SSH2 Information on page 507 • Using ACLs to Control SSH2 Access on page 508 • Using SCP2 from an External SSH2 Client on page 510 • Understanding the SSH2 Client Functions on the Switch on page 511 • Using SFTP from an External SSH2 Client on page 512 Enabling SSH2 for Inbound Switch Access To install the software module, see the instructions in Appendix B, Software Upgrade and Boot Options. Note: Do not terminate the SSH process (exsshd) that was installed since the last reboot unless you have saved your configuration. If you have installed a software module and you terminate the newly installed process without saving your configuration, your module may not be loaded when you attempt to restart the process with the start process command. You must enable SSH2 on the switch before you can connect to the switch using an external SSH2 client. Enabling SSH2 involves two steps: • Generating or specifying an authentication key for the SSH2 sessions. • Enabling SSH2 access by specifying a TCP port to be used for communication and specifying on which virtual router SSH2 is enabled. After it has enabled, by default, SSH2 uses TCP port 22 and is available on all virtual routers. Standard Key Authentication An authentication key must be generated before the switch can accept incoming SSH2 sessions. This can be done automatically by the switch, or you can enter a previously generated key. To have the key generated by the switch, use the following command: configure ssh2 key The key generation process can take up to ten minutes. After the key has been generated, you should save your configuration to preserve the key. To use a key that has been previously created, use the following command: configure ssh2 key {pregenerated} The switch prompts you to enter the pregenerated key. Chapter 17. Security | 505