SSH

[YLTan]

My company are looking to setup VPN using HP Secure Shell on all our HP servers. So all connection will be via SSH-2.

Do I need to make or check for changes on all the Cisco routers and switch configuration to see if they are able to handle SSH-2 ??

[Steve Steel · Accepted solution]

Hi


I would check it all and look at

http://www.ssh.com/documents/31/ssh_sentinel_14_cisco_pix.pdf

As an example

Steve Steel

[Sergejs Svitnevs]

The vulnerabilities of SSH in the Cisco devices can be found at:

http://www.cisco.com/warp/public/707/SSH-multiple-pub.html

Regards,
Sergejs

[SSO Montgomery]

You may wish to research OpenSSH. Their URL is:

http://www.openssh.com

It's free and seems to have less security findings.

[Donny Jekels]

I am confused with your question.

Does your company want to setup a VPN solution and allow you to SSH in to your unix boxes?

Or do they want to setup a VPN solution using SSH through the internet?
i.e. Users at home will SSH into your network with a SSH connection??

please advise
Donny
"Vison is the art of seeing the invisable!"

[Shannon Petry]

Agreed with the previous post, your intentions are not clear.

Basically... ssh runs everything on Port 22. If your just using a cisco as a gateway, then make sure port 22 is open for inbound and outbound traffic.

if your intending on using the cisco as a vpn device... I cant help you much there..


Regards,
Shannon

[YLTan]

Hi Shannon and Donny

thnx for the help.

we are looking into VPN where business partners can connect to our systems, something like user's home connect to company systems.

What I don't know is, do cisco routers and switches need any configuration for VPN to work or it just treat is as passthru.?

[Donny Jekels]

HI,

For the best free VPN solution look at FreesWan, and as for VPN to work through your Cisco routers and or firewalls, open port UDP 500.

Now here is the key, once you connect to your VPN server from your trusted Linux/Windows PC at home, you can establish a SSH session to any of your UNIX hosts inside your company's network through the existing VPN tunnel.

You will need to configure freeswan's own firewall (ipchains) to allow SSH (TCP port 22) through.

done
enjoy
Donny

[Chris Vail]

Installing and using ssh on HP is easy. However, we use BOTH VPN and ssh. Our VPN solution is from Cisco, and we use the RSA SecureID system that involves a keyfob.

I've attached my standard document explaining how to configure and use ssh for HP. If you'll follow it precisely, it will make for a very seamless and transparent system.

Thanks to Chris Wong, who explained why Secure Shell under 11i is so much faster than under 11.0 and earlier.