Enable SSH and remove Telnet on a 3COM 4200G Switch Script
As any security nut knows, telnet is bad, I mean really bad. Why would you want to send unencrpyted clear text passwords over your network? This is now my 2nd post of how to enable SSH on switches. You might remember an older post when I showed how to enable SSH on Nortel 5520 switches. I haven't blogged on how to enable SSH on Cisco because it's pretty easy and googleable (<~ new word?). 3COM isn't near as difficult as Nortel, but here is a script on how to enable SSH on 3COM 4200G series switches while at the same time disabling telnet. The only good thing I have to say about 3COM switches is that you don't have to load a new IOS or Image that supports SSH, it's all inclusive.
system-view
rsa local-key-pair create
1024
user-interface vty 0 4
authentication-mode scheme
protocol inbound ssh
local-user networkadmin
password simple MySSHpassword
service-type ssh
quit
ssh user networkadmin authentication-type password
save
NOTE: if you still have web access enabled for the switch, this newly configured username and password will be able to access the web interface!
Here is the longer version found on the PDF guide on 3COM's website. but I think it has unnecessary junk.
1. Enter system view.
<4200G> system-view
2. Enter AUX user interface view.
[4200G] user-interface aux 0
3. Specify to authenticate users logging in through the Console port using the local
password.
[4200G-ui-aux0] authentication-mode password
4. Set the local password to 123456 (in plain text).
[4200G-ui-aux0] set authentication password simple 123456
5. Specify commands of level 2 are available to users logging into the AUX user
interface.
[4200G-ui-aux0] user privilege level 2
6. Set the baud rate of the Console port to 19,200 bps.
[4200G-ui-aux0] speed 19200
7. Set the maximum number of lines the screen can contain to 30.
[4200G-ui-aux0] screen-length 30
8. Set the maximum number of commands the history command buffer can store to 20.
[4200G-ui-aux0] history-command max-size 20
9. Set the timeout time of the AUX user interface to 6 minutes.
[4200G-ui-aux0] idle-timeout 6