Enable HTTPS/SSH and disable HTTP/Telnet for switch management on PowerConnect 3500 series switches.

Resumen: How to restrict management access to HTTPS and SSH on PowerConnect 3500 series switches.

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.
Consulte estos recursos

Instrucciones

Article Summary:

This article provides the steps necessary to restrict management access to HTTPS and SSH.

This process requires use of the Command Line Interface (CLI). This process can be utilized through a serial or telnet session. However, if telnet is uesed, these steps must be followed in order to prevent unintentionally blocking access to remote management.

This procedure assumes:

  • The switch is already configured with an IP address and is reachable within the network. 
  • There is an account created with Privilege Level 15.  To verify this, use the command: console#show users accounts
Note: After completing these steps, you can expect to receive errors about certificate authenticity. This is due to the certificates and keys being self-generated. This is not an error.

 

 

Caution: Before disabling either telnet or HTTP access, verify SSH or HTTPS access.
Note: If SSH or HTTPS is enabled and the disabling of telnet and HTTP is desired, skip to step 3 to disable telnet and step 5 to disable HTTP.  
  1. Connect to the switch via CLI
  2. To enable SSH, enter the following commands:
    1. console>enable
    2. console#config
    3. console(config)#crypto key generate rsa
    4. console(config)#crypto key generate dsa
    5. console(config)#ip ssh server
  3. To disable telnet, enter:  console(config)#no ip telnet server
  4. To enable HTTPS, enter the following commands"
    1. console(config)# console(config)#crypto certificate 1 generate key-generate
    2. console(config)#ip https certificate 1
    3. console(config)# ip https server
Note:  This system is capable of the generation and storage of 2 certificates. To generate the second key, replace the number 1 with 2. To activate the second key, use (config)#ip https certificate 2.
  1. To disable HTTP, enter:  console(config)# no ip http server
  2. After verifying connectivity via SSH or HTTPS, save the configuration by entering:  console#copy running-config startup-config

Productos afectados

PowerConnect 3524, PowerConnect 3524P, PowerConnect 3548, PowerConnect 3548P
Propiedades del artículo
Número del artículo: 000120452
Tipo de artículo: How To
Última modificación: 05 jun 2025
Versión:  5
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.