Admin Guide
Table Of Contents
- Contents
- Chapter 1: Introduction
- Chapter 2: New in this document
- Chapter 3: Basic administration
- Chapter 4: System startup fundamentals
- Chapter 5: Boot parameter configuration using ACLI
- Chapter 6: Run-time process management using ACLI
- Chapter 7: Chassis operations
- Chassis operations fundamentals
- Chassis operations configuration using ACLI
- Enabling jumbo frames
- Configuring port lock
- Configuring SONMP
- Viewing the topology message status
- Associating a port to a VRF instance
- Configuring an IP address for the management port
- Configuring Ethernet ports with Autonegotiation
- Enabling channelization
- Configuring serial management port dropping
- Controlling slot power
- Enabling or disabling the USB port
- Chassis operations configuration using EDM
- Editing system information
- Editing chassis information
- Configuring system flags
- Configuring channelization
- Configuring basic port parameters
- Viewing the boot configuration
- Configuring boot flags
- Enabling Jumbo frames
- Configuring the date and time
- Associating a port to a VRF instance
- Configuring CP Limit
- Configuring an IP address for the management port
- Editing the management port parameters
- Configuring the management port IPv6 interface parameters
- Configuring management port IPv6 addresses
- Auto reactivating the port of the SLPP shutdown
- Editing serial port parameters
- Enabling port lock
- Locking a port
- Viewing power information
- Viewing power status on VSP 8400
- Viewing fan information
- Viewing topology status information
- Viewing the topology message status
- Configuring a forced message control pattern
- Chapter 8: Hardware status using EDM
- Chapter 9: Domain Name Service
- Chapter 10: Licensing
- Chapter 11: Network Time Protocol
- Chapter 12: Secure Shell
- Secure Shell fundamentals
- Secure Shell configuration using ACLI
- Downloading the software
- Enabling the SSHv2 server
- Changing the SSH server authentication mode
- Setting SSH configuration parameters
- Verifying and displaying SSH configuration information
- Connecting to a remote host using the SSH client
- Generating user key files
- Managing an SSL certificate
- Disabling SFTP without disabling SSH
- Enabling SSH rekey
- Configuring SSH rekey data-limit
- Configuring SSH rekey time-interval
- Displaying SSH rekey information
- Downgrading or upgrading from releases that support different key sizes
- Secure Shell configuration using Enterprise Device Manager
- Chapter 13: System access
- System access fundamentals
- System access configuration using ACLI
- Enabling ACLI access levels
- Changing passwords
- Configuring an access policy
- Specifying a name for an access policy
- Allowing a network access to the switch
- Configuring access policies by MAC address
- System access security enhancements
- Displaying the boot config flags status
- Enabling enhanced secure mode
- Creating accounts for different access levels
- Deleting accounts in enhanced secure mode
- Configuring a password for a specific user
- Returning the system to the factory defaults
- Configuring the password complexity rule
- Configuring the password length rule
- Configuring the change interval rule
- Configuring the reuse rule
- Configuring the maximum number of sessions
- Configuring the maximum age rule
- Configuring the pre- and post-notification rule
- System access configuration using EDM
- Chapter 14: ACLI show command reference
- Access, logon names, and passwords
- Basic switch configuration
- Current switch configuration
- CLI settings
- Ftp-access sessions
- Hardware information
- NTP server statistics
- Power summary
- Power information for power supplies
- System information
- System status (detailed)
- Telnet-access sessions
- Users logged on
- Port egress COS queue statistics
- CPU queue statistics
- Chapter 15: Port numbering and MAC address assignment reference
- Chapter 16: Supported standards, RFCs, and MIBs
- Glossary
Table 36: DSA user key files
SSH server SSH client side SSH server side
VOSS switch with
enhanced secure mode
disabled
Private and public keys by access
level:
• rwa—/intflash/.ssh/id_dsa_rwa
(private key), /intflash/.ssh/
id_dsa_rwa.pub (public key)
• rw—/intflash/.ssh/id_dsa_rw (private
key), /intflash/.ssh/id_dsa_rw.pub
(public key)
• ro—/intflash/.ssh/id_dsa_ro (private
key), /intflash/.ssh/id_dsa_ro.pub
(public key)
• rwl1—/intflash/.ssh/id_dsa_rwl1
(private key), /intflash/.ssh/
id_dsa_rwl1.pub (public key)
• rwl2—/intflash/.ssh/id_dsa_rwl2
(private key), /intflash/.ssh/
id_dsa_rwl2.pub (public key)
• rwl3—/intflash/.ssh/id_dsa_rwl3
(private key), /intflash/.ssh/
id_dsa_rwl3.pub (public key)
Public keys on the server side based
on access level:
• rwa—/intflash/.ssh/dsa_key_rwa
(public key)
• rw—/intflash/.ssh/dsa_key_rw (public
key)
• ro—/intflash/.ssh/dsa_key_ro (public
key)
• rwl1—/intflash/.ssh/dsa_key_rwl1
(public key)
• rwl2—/intflash/.ssh/dsa_key_rwl2
(public key)
• rwl3—/intflash/.ssh/dsa_key_rwl3
(public key)
VOSS switch with
enhanced secure mode
enabled
Private and public keys by access role
level:
• administrator—/intflash/.ssh/
id_dsa_admin (private key), /
intflash/.ssh/id_dsa_admin.pub
(public key)
• operator —/intflash/.ssh/
id_dsa_operator (private key), /
intflash/.ssh/id_dsa_operator.pub
(public key)
• security —/intflash/.ssh/
id_dsa_security (private key), /
intflash/.ssh/id_dsa_security.pub
(public key)
• auditor —/intflash/.ssh/
id_dsa_auditor (private key), /
intflash/.ssh/id_dsa_auditor.pub
(public key)
Public keys on the server side based
on access level:
• administrator—/intflash/.ssh/
dsa_key_admin (public key)
• operator—/intflash/.ssh/
dsa_key_operator (public key)
• security—/intflash/.ssh/
dsa_key_security (public key)
• pirivilege—/intflash/.ssh/dsa_key_priv
(public key)
• auditor—/intflash/.ssh/
dsa_key_auditor (public key)
Table continues…
Secure Shell fundamentals
January 2017 Administering Avaya VSP 7200 Series and 8000 Series 153
Comments on this document? infodev@avaya.com