380 The Command Line InterfaceFor more information on how to enable Telnet access, see the/cfg/sys/adm/telnet command (see "telnet on|off" (page 283) ). Formore information on how to restrict Telnet access to one or more specificmachines, see “Configuring the Access List” (page 273).Running TelnetOnce the IP parameters on the Nortel SNAS are configured and Telnetaccess is enabled, you can access the CLI using a Telnet connection.To establish a Telnet connection with the Nortel SNAS, run the Telnetprogram on your workstation and issue the Telnet command, followed bythe IP address of the Nortel SNAS.telnet <IP address>You will then be prompted to enter a valid user name and password. Formore information about different user accounts and default passwords, see“Accessing the Nortel SNAS cluster” (page 381).Establishing a connection using SSHUsing an SSH client to establish a connection over the network providesthe following security benefits:• server host authentication• encryption of passwords for user authentication• encryption of all traffic that is transmitted over the network whenconfiguring or collecting information from the Nortel SNASEnabling and restricting SSH accessSSH access to the Nortel SNAS is disabled by default. However,depending on the severity of your security policy, you may want to enableSSH access. You may also restrict SSH access to one or more specificmachines.For more information on how to enable SSH access, see the/cfg/sys/adm/ssh command (see "ssh on|off" (page 283) ). Formore information on how to restrict SSH access to one or more specificmachines, see “Configuring the Access List” (page 273).Running an SSH clientConnecting to the Nortel SNAS using an SSH client is similar toconnecting using Telnet: the IP parameters on the Nortel SNAS mustbe configured in advance, and SSH access must be enabled. After youprovide a valid user name and password, the CLI in the Nortel SNASis accessible the same way as when using a Telnet client. However,since a secured and encrypted communication channel is set up evenbefore the user name and password is transmitted, all traffic sent over theNortel Secure Network Access SwitchUsing the Command Line InterfaceNN47230-100 03.01 Standard28 July 2008Copyright © 2007, 2008 Nortel Networks.
