Enable HTTPS/SSH and disable HTTP/Telnet for switch management on PowerConnect 3500 series switches.

Summary: How to restrict management access to HTTPS and SSH on PowerConnect 3500 series switches.

Αυτό το άρθρο ισχύει για Αυτό το άρθρο δεν ισχύει για Αυτό το άρθρο δεν συνδέεται με κάποιο συγκεκριμένο προϊόν. Δεν προσδιορίζονται όλες οι εκδόσεις προϊόντων σε αυτό το άρθρο.
Δείτε άλλους πόρους

Instructions

Article Summary:

This article provides the steps necessary to restrict management access to HTTPS and SSH.

This process requires use of the Command Line Interface (CLI). This process can be utilized through a serial or telnet session. However, if telnet is uesed, these steps must be followed in order to prevent unintentionally blocking access to remote management.

This procedure assumes:

  • The switch is already configured with an IP address and is reachable within the network. 
  • There is an account created with Privilege Level 15.  To verify this, use the command: console#show users accounts
Note: After completing these steps, you can expect to receive errors about certificate authenticity. This is due to the certificates and keys being self-generated. This is not an error.

 

 

Caution: Before disabling either telnet or HTTP access, verify SSH or HTTPS access.
Note: If SSH or HTTPS is enabled and the disabling of telnet and HTTP is desired, skip to step 3 to disable telnet and step 5 to disable HTTP.  
  1. Connect to the switch via CLI
  2. To enable SSH, enter the following commands:
    1. console>enable
    2. console#config
    3. console(config)#crypto key generate rsa
    4. console(config)#crypto key generate dsa
    5. console(config)#ip ssh server
  3. To disable telnet, enter:  console(config)#no ip telnet server
  4. To enable HTTPS, enter the following commands"
    1. console(config)# console(config)#crypto certificate 1 generate key-generate
    2. console(config)#ip https certificate 1
    3. console(config)# ip https server
Note:  This system is capable of the generation and storage of 2 certificates. To generate the second key, replace the number 1 with 2. To activate the second key, use (config)#ip https certificate 2.
  1. To disable HTTP, enter:  console(config)# no ip http server
  2. After verifying connectivity via SSH or HTTPS, save the configuration by entering:  console#copy running-config startup-config

Επηρεαζόμενα προϊόντα

PowerConnect 3524, PowerConnect 3524P, PowerConnect 3548, PowerConnect 3548P
Ιδιότητες άρθρου
Article Number: 000120452
Article Type: How To
Τελευταία τροποποίηση: 05 Ιουν 2025
Version:  5
Βρείτε απαντήσεις στις ερωτήσεις σας από άλλους χρήστες της Dell
Υπηρεσίες υποστήριξης
Ελέγξτε αν η συσκευή σας καλύπτεται από τις Υπηρεσίες υποστήριξης.