User's Manual

Fortress ES-Series CLI Guide: Network Security, Authentication and Auditing
119
The Mesh Point CLI returns OK when settings are successfully
changed.
You must be logged on to an
administrator -level account to
change configuration settings (refer to Section 2.2).
4.1.13 SSH Access to the Mesh Point CLI
SSH2 (Secure Shell protocol 2) is enabled on the Mesh Point
by default. The Mesh Point does not support SSH1.
You can view the current SSH setting with
show ssh:
> show ssh
EnableSsh: Y
Public Keys
---------
0 public keys configured
NOTE: Disabling
SSH prevents
remote access to the
Mesh Point CLI from
the network. With SSH
disabled you can access
the CLI only over a
direct connection to the
Mesh Point’s
Console
port.
4.1.13.1 Disabling and Enabling SSH Access to the Mesh Point
CLI
To disable SSH, enter:
# set ssh off
You can disable SSH from a remote terminal session; however,
the SSH session will be dropped immediately upon execution
of the command.
To re-enable SSH, log in to the Mesh Point CLI (via a direct
connection to the Mesh Point’s
Console port) and enter:
# set ssh on
You must be logged on to an administrator -level account to
change configuration settings (refer to Section 2.2).
4.1.13.2 Configuring Public Key Authentication
For more secure authentication, the Mesh Point provides the
capability to configure SSH to utilize Public Key Authentication
in addition to entering a username/password.
There are two ways to import the public key into the Mesh
Point.
The first way is to manually enter the contents of the SSH
public key. When the following command is executed, the user
will be prompted to enter the SSH public key information:
# import sshkey -name <SSHPublicKeyName>
The second way is to provide a URL to the SSH public key file:
# import sshkey -name <SSHPublicKeyName> -url <SSHPublicKeyURL>
The Mesh Point provides the capability to delete the SSH
public keys either all at once or by name.
To delete all the SSH public keys: