The objective of this article is to enable a secure connection method, while disabling an insecure method of remote connection, Telnet, on Force10 S-Series Switches.
To enable SSH, disabled by default, and to disable Telnet, enabled by default, complete the following steps:
- Enable SSH in the CLI using a console or Telnet connection saving the configuration.
Dell>
Dell>en
Dell#
Dell#configure
Dell(conf)#ip ssh server enable
Dell(conf)#crypto key generate
Dell(conf)#exit
Dell#show ip ssh
SSH server : enabled.
SSH server version : v1 and v2.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA Authentication : disabled.
Vty Encryption Remote IP
Dell(conf)#exit
Dell#copy running-config startup-config
File with same name already exist.
Proceed to copy the file [confirm yes/no]: y
- Test the remote access using SSH.
- Open a terminal emulator program such as Putty
- Enter the IP address of the switch in the corresponding box
- Set the Connection type to SSH
- Click Open
- Log in to the switch using the CLI
WARNING: Failure to test a successful login using SSH prior to disabling Telnet could result in the loss of remote access to the switch.
- Disable Telnet and save configuration using a Putty session SSH in the CLI.
Dell>
Dell>en
Dell#
Dell#configure
Dell(conf)#no ip telnet server enable
Dell(conf)#exit
Dell#copy running-config startup-config
File with same name already exist.
Proceed to copy the file [confirm yes/no]: y