User's Manual

DragonWave Inc.
104
Horizon Compact Plus Release 1.0.1 Wireless Ethernet Product User Manual – Volume 2
17.3 Secure Shell Access Security
Telnet sessions over a network such as the Internet are not secure. User names and passwords, as well
as commands and system responses, are transmitted in clear text during a Telnet session. A secure
shell (SSH) protocol can be enabled in the Horizon Compact Plus system to ensure that access to the
units is restricted to authorized clients. Horizon Compact Plus uses the Secure Shell SSH2 server
programme to create the secure environment for Telnet sessions. SSH2 is a recognised industry
standard, encrypting, security, programme. When enabled, SSH encrypts the entire Telnet session,
including all usernames, passwords, commands and responses from the system. SSH also verifies that
you are talking to the desired server by means of an authentication process using a “fingerprint”. The
“fingerprint” is a unique identifier found only on the desired server.
A Secure Shell client programme needs to be installed on any computer which is to be used to manage
a Horizon Compact Plus system with SSH enabled. A free SSH client programme (PuTTY) is available
on the Web.
Note that both SSH and Telnet can be enabled at the same time. To ensure security, once SSH has
been enabled, disable Telnet.
Also note that the Web server must be enabled on the Horizon before SSH can be enabled.
17.4 Configuring Secure Shell (SSH)
Use the following procedure to manage the SSH feature of the Horizon Compact Plus system.
Procedure 17-3
Configuring Secure Shell (SSH)
Required Action
Steps
login
Log in as the Super User.
View ssh server
Returns the status of the Secure Shell SSH2 server.
Sequence :
get ssh server press Enter
The system responds:
ssh server is [on/off]
Configure ssh server
Enables or disables the Secure Shell SSH2 server.
Sequence :
set ssh server [on/off] press Enter
The system responds:
ssh server is [on/off]
Note: The Web server must be ON before the SSH server can be
enabled.
A system reset is required before SSH will be invoked.