Disabling The Console Port On The Ml-Series Card; Secure Login On The Ml-Series Card; Secure Shell On The Ml-Series Card; Understanding Ssh - Cisco ONS 15454 SDH Configuration Manual

Disabling the Console Port on the ML-Series Card

Disabling the Console Port on the ML-Series Card
There are several ways to access the Cisco IOS running on the ML-Series card, including a direct
connection to the console port, which is the RJ-11 serial port on the front of the card. Users can increase
security by disabling this direct connection, which is enabled by default. This prevents console port input
without preventing any console port output, such as Cisco IOS error messages.
You can disable console port access through CTC or TL1. To disable it with CTC, at the card-level view
of the ML-Series card, click under the IOS tab and uncheck the Enable Console Port Access box and
click Apply. The user must be logged in at the Superuser level to complete this task.
To disable it using TL1, refer to the Cisco ONS SONET TL1 Command Guide.

Secure Login on the ML-Series Card

The ML-Series card supports the Cisco IOS login enhancements integrated into Cisco IOS
Release 12.2(25)S and introduced in Cisco IOS Release 12.3(4)T. The enhancements allow users to
better secure the ML-Series card when creating a virtual connection, such as Telnet, SSH, or HTTP. The
secure login feature records successful and failed login attempts for vty sessions (audit trail) on the
ML-Series card. These features are configured using the Cisco IOS command-line interface (CLI.)
For more information, including step-by-step configuration examples, refer to the Cisco IOS Release
12.2(25)S feature guide module, Cisco IOS Login Enhancements.

Secure Shell on the ML-Series Card

This section describes how to configure the SSH feature.
These sections contain this information:
•
•
•
For other SSH configuration examples, see the "SSH Configuration Examples" section in the
"Configuring Secure Shell" chapter of the Cisco IOS Security Configuration Guide, Cisco IOS
Release 12.2.
For complete syntax and usage information for the commands used in this section, see the command
Note
reference for Cisco IOS Release 12.2.

Understanding SSH

The ML-Series card supports SSH, both version 1 (SSHv1) and version 2 (SSHv2). SSHv2 offers
security improvements over SSHv1 and is the default choice on the ML-Series card.
SSH has two applications, an SSH server and SSH client. The ML-Series card only supports the SSH
server and does not support the SSH client. The SSH server in Cisco IOS software works with publicly
and commercially available SSH clients.
Cisco ONS 15454 and Cisco ONS 15454 SDH Ethernet Card Software Feature and Configuration Guide, R8.0
19-2
Understanding SSH, page 19-2
Configuring SSH, page 19-3
Displaying the SSH Configuration and Status, page 19-5
Chapter 19 Configuring Security for the ML-Series Card