User manual SONY VAIO VGN-Z790Y

[. . . ] A-3 iii Publication Version 1. 0, February 2006 iv Publication Version 1. 0, February 2006 Application Note: Configuring and Enabling Management Security Chapter 1 Introduction In the past, network communications were simply a matter of packaging frames of information and shipping them over the wire to their destination. Protocols gave little thought to who might be viewing the frames as they crossed the wire, or what illegitimate parties might do with the information so gleaned. More and more, security has become an ever-present concern amongst the members of the networking community. Networking infrastructure is far too important to risk abuse by hackers, whether they are malevolent or simply mischievous. [. . . ] Networking infrastructure is far too important to risk abuse by hackers, whether they are malevolent or simply mischievous. As a whole, the community has turned to encryption as a means of ensuring the security of network transactions. Interactive login is a mainstay for providing a means to control and/or configure an entity across the network. For decades the telnet protocol has provided this capability for devices wishing to provide interactive login over a network. However, these protocols are chief culprits with regard to the transmission of sensitive information (e. g. passwords) over the network unprotected. The current de facto standard for providing interactive login in a secure fashion is the Secure Shell (SSH). SSH provides a number of services in a secure manner. These include port forwarding, file transfer, X11 forwarding, and interactive login. Of these, currently only interactive login is of interest for the SONY managed switch software. Two scripts are included in the appendix at the end of this application note along with some helper files. This set of files can be freely modified and used to generate the appropriate self-signed credentials. Generation of these credentials has been verified using both cygwin and Linux. Once the component files are created, the credentials must be loaded onto the switch running the SONY managed switch. This is accomplished using the copy command from a tftp server. From privileged EXEC mode, issue the following command: #copy tftp://192. 168. 77. 122/rsa1. key nvram:sshkey-rsa1 where the IP address of the tftp server should be substituted as appropriate. Enabling Management Security v1. 0, February 2006 2-1 Application Note: Configuring and Enabling Management Security 2. Repeat the copy command for all the other authentication components: · · · · · · rsa2. key dsa. key dh512. pem dh1024. pem server. pem rootcert. pem nvram:sshkey-rsa2 nvram:sshkey-dsa nvram:sslpem-dhweak nvram:sslpem-dhstrong nvram:sslpem-server nvram:sslpem-root The SSL and SSH credentials may be uploaded separately as needed. However, it is likely that if security is required for one access method it will be required for all access methods. Therefore, best practice is to create the certificates and authentication key simultaneously. Configuring Secure Shell Once the authentication credentials are loaded and the certificates and authentication keys are formed, management security may be configured on the SONY managed switch device. From privileged EXEC mode, issue the command # ip ssh as described in the Command Line Interface Reference manual. [. . . ] Therefore, best practice is to create the certificates and authentication key simultaneously. Configuring Secure Shell Once the authentication credentials are loaded and the certificates and authentication keys are formed, management security may be configured on the SONY managed switch device. From privileged EXEC mode, issue the command # ip ssh as described in the Command Line Interface Reference manual. This will allow secure shell sessions to be instantiated on the SONY managed switch. Check the message log to determine the success or failure of the command. [. . . ]