User manual

4 Configuration DES-1210 Metro Ethernet Managed Switch User Manual
84
essential tool in today’s networking environment. It is a powerful guardian against numerous existing security
hazards that now threaten network communications.
Figure 4.142 – Security > SSH Settings > SSH Settings
To configure the SSH server on the Switch, modify the following parameters and click Apply:
SSH State: Enabled or Disabled SSH on the Switch. The default is Disabled.
Max Session (1 - 4): Enter a value between 1 and 4 to set the number of users that may simultaneously
access the Switch. The default setting is 1.
Connection Timeout (120 - 600): Allows the user to set the connection timeout. The use may set a time
between 120 and 600 seconds. The default setting is 120 seconds.
Authfail Attempts (2 - 20): Allows the Administrator to set the maximum number of attempts that a user
may try to log on to the SSH Server utilizing the SSH authentication. After the maximum number of attempts
has been exceeded, the Switch will be disconnected and the user must reconnect to the Switch to attempt
another login. The number of maximum attempts may be set between 2 and 20. The default setting is 2.
Rekey Timeout: Using the pull-down menu uses this field to set the time period that the Switch will change
the security shell encryptions. The available options are Never, 10 min, 30 min, and 60 min. The default
setting is 60 min.
Security > SSH Settings > SSH Authmode and Algorithm Settings
The SSH Authentication and Algorithm Settings page allows user to configure the desired types of SSH
algorithms used for authentication encryption.
Figure 4.143 – Security > SSH Settings > SSH Authmode and Algorithm Settings
SSH Authentication Mode Settings:
Password: Allows user to use a locally configured password for authentication on the Switch.
Public Key: This parameter may be enabled if the administrator wishes to use a public key configuration set
on a SSH server, for authentication on the Switch.
Host Based: This parameter may be enabled if the administrator wishes to use a host computer for
authentication. This parameter is intended for Linux users requiring SSH authentication techniques and the
host computer is running the Linux operating system with a SSH program previously installed.
Encryption Algorithm:
3DES-CBC: Use the check box to enable or disable the Triple Data Encryption Standard encryption
algorithm with Cipher Block Chaining. The default is enabled.
Data Integrity Algorithm: