
C
SSH F
UNCTIONALITY
This chapter provides information about the SSH server, SFTP, and the subsystems
SSH-TRANS, SSH-AUTH, and SSH-CONNECT.
Introduction
SSH provides secure Internet access to the BSGX4e CLI, which enables system
administration to log on remotely, and securely configure and monitor the BSGX4e
over an insecure network.
SSH consists of three components:
The Transport Layer Protocol [SSH-TRANS] provides server authentication,
confidentiality, and integrity. As an option, compression can be provided.
SSH-TRANS is usually run over a TCP/IP connection, but it can also run over any
other reliable data stream.
The User Authentication Protocol [SSH-AUTH] authenticates the client-side user
to the server. SSH-AUTH runs over the transport layer protocol.
The Connection Protocol [SSH-CONNECT] multiplexes the encrypted tunnel into
several logical channels. SSH-CONNECT runs over the user authentication
protocol.
The SSH authentication process proceeds as follows:
The client sends a service request a secure transport layer connection is
established.
A second service request is sent after user authentication is complete.
New protocols are defined and coexist with the protocols listed above:
SSH-TRANS, SSH-AUTH and SSH-CONNECT.
SSH and SFTP provide server functionality only; client functionality is not
provided.
SSH Server Functionality
The following summarizes the SSH functions and constraints.
The SSH server supports up to three (3) concurrent connections.
The SSH server listens for connections on a single TCP port.
The port can be set to which the SSH server listens for connections.
When a connection is accepted, it is handled first by the SSH-TRANS subsystem.
Comments to this Manuals