No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Maintenance Guide

TE30, TE40, TE50, TE60, and TX50 Videoconferencing Endpoint V600R006C10

This document guides the operator to maintain the device
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Performing SSH Access Control

Performing SSH Access Control

During remote access and data transmission, SSH commands can be run to create an encrypted channel between the application layer and client.

Enabling SSH or Telnet

Use either of the following ways to enable SSH or Telnet:

  • On the remote control UI, choose Advanced > Settings > Security > SSH/Telnet and select SSH or Telnet.
  • On the web interface, choose System Settings > Security > SSH/Telnet and set SSH or Telnet login to Enable.

    Telnet is an insecure communication protocol. You are advised to disable it.

Logging In as a User

This section uses PuTTY as an example to describe SSH access control methods.

NOTE:
  • PuTTY is a cross-platform remote login tool, which you can download at https://www.chiark.greenend.org.uk/~sgtatham/putty/. Use PuTTY 0.63 or a later version.
  • If you want to log in to the endpoint from PuTTY through the Telnet service, choose Connection > Telnet on PuTTY and set Telnet negotiation mode to Passive.
  1. Run PuTTY on your computer.
  2. In the Session window, enter the endpoint IP address, for example, 10.10.10.1, in the Host Name (or IP address) field, as shown in Figure 7-2.

    Figure 7-2 PuTTY Configuration dialog box

  3. Select SSH for Connection type. Use the default value for Port.
  4. Click Open.

    The login window is displayed.

  5. Enter the user name and password and run the commands. For details, see the TE30&TE40&TE50&TE60&TX50&RP100&RP200 Command Reference.

    NOTE:

    The default administrator account of Telnet and SSH is debug and the password is Change_Me by default.

Logging In Using the SSH Public Key

To secure and simplify SSH login, use the SSH public key to log in to the endpoint.

NOTE:

Before logging in to the endpoint using the SSH public key, ensure that SSH has been enabled. For details, see Enabling SSH or Telnet.

  • Creating an SSH Private-Public Key Pair

Create an SSH private-public key pair and associate the private-public key pair with the local computer or server.

  1. Log in to the Linux operating system, run the ssh-keygen command in any CLI, and press Enter.
  2. Enter the name (for example, TE30) of the SSH private-public key pair as prompted and press Enter.

    The SSH public key TE30.pub and SSH private key TE30 are created.

  3. Go to the directory where TE30.pub and TE30 are created and copy them to the local computer or server.
  • Importing the SSH Public Key

Import the SSH public key using the endpoint web interface.

  1. Choose System Settings > Installation. The Installation page is displayed.
  2. Click Import SSH Public Key. The Import SSH Public Key dialog box is displayed.
  3. Click Select File and select the SSH public key TE30.pub from the local computer or server.
  4. Click Import.
  5. Click Return when OK is displayed.
  • Procedure

The following takes the SSH client SecureCRT as an example to describe how to log in to the endpoint using the SSH public key.

NOTE:

SecureCRT is a login application for remote login across different platforms. It can be obtained from Huawei UC&C Security Center by Huawei technical support or downloaded from the Internet. Use SecureCRT 6.7.1 or a later version.

  1. Run SecureCRT on your computer.

    The SecureCRT quick connect dialog box is displayed, as shown in Figure 7-3.

    Figure 7-3 Initial Quick Connect dialog box

  2. Select SSH2 for Protocol.
  3. In Hostname, enter the IP address, such as 10.10.10.1. Use the default value for Port.
  4. In the Authentication area, select PublicKey only.
  5. Click PublicKey and then Properties. The Public Key Properties dialog box is displayed.
  6. In the Use identity or certificate file text box, click ... and select the SSH public key TE30.pub, as shown in Figure 7-4. (The Use global public key setting and Use identity or certificate file options are selected by default.)

    Figure 7-4 Selecting the SSH public key

  7. Click OK to return to the Quick Connect dialog box, as shown in Figure 7-5.

    Figure 7-5 Quick Connect dialog box

  8. In the Username text box, enter the SSH login account, for example, SSH administrator account debug.
  9. Click Connect.

    The login interface is displayed.

  10. Run the commands.

    For details, see the TE30&TE40&TE50&TE60&TX50&RP100&RP200 Command Reference.

Translation
Download
Updated: 2019-01-31

Document ID: EDOC1000184611

Views: 30074

Downloads: 162

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next