Cambium Networks cnMatrix EX2028 Handleiding (320 Pagina's)

Handleiding

/ 320

Je bekijkt pagina 221 van 320

Management Features 221

l

Cipher and key exchange algorithms negotiate between two communicating entities.

l

Key exchange mechanism.

l

Encryption and server authentication.

The cnMatrix SSH server implementation supports the following:

l

Algorithms:

l

Cipher algorithms – CHACHA20-POLY1305, 3DES-CBC, AES128-CBC, AES256-CBC, AES128-CTR,

AES256-CTR, AES128-GCM, and AES256-GCM.

l

MAC algorithms - HMAC-SHA2-512-ETM, HMAC-SHA2-256-ETM, HMAC-SHA2-512, HMAC-SHA

2-256.

l

Version compatibility flag (SSH 1.0 support) – a user can use this to change the protocol version

support to SSH 1.0 or SSH 2.0.

l

The key exchange algorithms supported are Diffie-hellman-group1sha1 and Diffie-hellman-

group14-sha1. The SSH server uses the key generated during the key exchange for data encryption

and providing data integrity.

l

The Public Key algorithms supported are ssh-rsa and ssh-dss.

l

Authentication using username and password.

l

Timer for authentication and sends a disconnect message in case the timer expires. The timeout

period is 10 minutes. The SSH server allows a maximum of 10 authentication attempts by the user.

If the threshold is reached, the server sends a disconnect message to the client.

The SSH server implementation does not support the following:

l

Certificates for server and user authentication.

l

Session re-keying after a specified time interval or after a specified amount of data transfer.

l

User authentication using public key, because it is mandatory for the server to validate the public

key and also to verify the signature sent by the client. This is not possible without the OOB transfer

of client’s public key to the server or some trusted authority like certificate authorities.

l

Host based authentication.

l

TCP/IP forwarding or X11 forwarding.

The SSH client functionality is implemented in cnMatrix by integrating PuTTY (version 0.60) open source

code. The SSH client session to any reachable host can be established from cnMatrix through CLI. SSH

client feature can be enabled or disabled through SNMP and CLI. SSH client supports both Ipv4 and Ipv6

addresses.

Options supported in SSH client:

l

- 1 - Forces SSH to try protocol version 1 only.

l

- 2 - Forces SSH to try protocol version 2 only.

l

- 4 - Forces SSH to use Ipv4 addresses only.

/ 320

Bekijk gratis de handleiding van Cambium Networks cnMatrix EX2028, stel vragen en lees de antwoorden op veelvoorkomende problemen, of gebruik onze assistent om sneller informatie in de handleiding te vinden of uitleg te krijgen over specifieke functies.