topic Re: SSH in Operating System - HP-UX

SSH

YLTan — Thu, 13 Mar 2003 14:28:24 GMT

My company are looking to setup VPN using HP Secure Shell on all our HP servers. So all connection will be via SSH-2.

Do I need to make or check for changes on all the Cisco routers and switch configuration to see if they are able to handle SSH-2 ??

Re: SSH

Steve Steel — Thu, 13 Mar 2003 14:53:34 GMT

Hi

I would check it all and look at

http://www.ssh.com/documents/31/ssh_sentinel_14_cisco_pix.pdf

As an example

Steve Steel

Re: SSH

Sergejs Svitnevs — Thu, 13 Mar 2003 15:47:04 GMT

The vulnerabilities of SSH in the Cisco devices can be found at:

http://www.cisco.com/warp/public/707/SSH-multiple-pub.html

Regards,
Sergejs

Re: SSH

SSO Montgomery — Thu, 13 Mar 2003 19:59:26 GMT

You may wish to research OpenSSH. Their URL is:

http://www.openssh.com

It's free and seems to have less security findings.

Re: SSH

Donny Jekels — Thu, 13 Mar 2003 20:59:40 GMT

I am confused with your question.

Does your company want to setup a VPN solution and allow you to SSH in to your unix boxes?

Or do they want to setup a VPN solution using SSH through the internet?
i.e. Users at home will SSH into your network with a SSH connection??

please advise
Donny
"Vison is the art of seeing the invisable!"

Re: SSH

Shannon Petry — Thu, 13 Mar 2003 21:32:30 GMT

Agreed with the previous post, your intentions are not clear.

Basically... ssh runs everything on Port 22. If your just using a cisco as a gateway, then make sure port 22 is open for inbound and outbound traffic.

if your intending on using the cisco as a vpn device... I cant help you much there..

Regards,
Shannon

Re: SSH

YLTan — Fri, 14 Mar 2003 02:00:04 GMT

Hi Shannon and Donny

thnx for the help.

we are looking into VPN where business partners can connect to our systems, something like user's home connect to company systems.

What I don't know is, do cisco routers and switches need any configuration for VPN to work or it just treat is as passthru.?

Re: SSH

Donny Jekels — Fri, 14 Mar 2003 02:09:45 GMT

HI,

For the best free VPN solution look at FreesWan, and as for VPN to work through your Cisco routers and or firewalls, open port UDP 500.

Now here is the key, once you connect to your VPN server from your trusted Linux/Windows PC at home, you can establish a SSH session to any of your UNIX hosts inside your company's network through the existing VPN tunnel.

You will need to configure freeswan's own firewall (ipchains) to allow SSH (TCP port 22) through.

done
enjoy
Donny

Re: SSH

Chris Vail — Fri, 14 Mar 2003 15:27:35 GMT

Installing and using ssh on HP is easy. However, we use BOTH VPN and ssh. Our VPN solution is from Cisco, and we use the RSA SecureID system that involves a keyfob.

I've attached my standard document explaining how to configure and use ssh for HP. If you'll follow it precisely, it will make for a very seamless and transparent system.

Thanks to Chris Wong, who explained why Secure Shell under 11i is so much faster than under 11.0 and earlier.