User manual NETGEAR GSM7352S

[. . . ] Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this document are copyright Intoto, Inc. Disclaimers February 2006 Information in this document is subject to change at any time without notice and is provided "as is" with no warranty. makes no warranty of any kind with regard to this material including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. [. . . ] Managing devices with a web browser has been standard practice for several years. Unfortunately, standard HTTP transactions are no more secure than telnet. This was one of the original barriers to the success of "e-commerce". The solution (then and now) is the use of the Secure Sockets Layer (SSL) protocol. SSL provides a means of abstracting an encrypted connection between two stations. Once established, such a connection is virtually no different to use than an unsecured connection. A third component of management on a modern networking appliance is SNMP. The SNMP protocol has it own security mechanisms outside of SSH and SSL. Consequently discussion of security for SNMP transactions is outside the scope of this document. Introduction v1. 0, February 2006 1-1 Application Note: Configuring and Enabling Management Security 1-2 v1. 0, February 2006 Introduction Application Note: Configuring and Enabling Management Security Chapter 2 Enabling Management Security Enabling management security is a two-step process. The first step involves generating and loading appropriate authentication keys (SSH) and security certificates (SSL). can validate these certificates and keys but for evaluation purposes validation is unnecessary. The second step involves enabling either SSL or SSH and optionally disabling the insecure versions of telnet and web management. Once enabled, subsequent management connections may be made in a secure manner. Certificate Generation To generate self-signed credentials, the open source applications ssh-keygen and openssl can be used to create the seven files used to form the security certificates and authentication keys. Both of these applications are well documented by the open source community. [. . . ] Consult the message log for to determine the success or failure status. Enabling Management Security v1. 0, February 2006 2-3 Application Note: Configuring and Enabling Management Security Valid certificates are indicated by a message log entry that looks like the following: 0 days 01:25:29 Unit: 1 : File: sslt_util. c : Line: 303 : SSLT: Successfully loaded all required SSL PEM files Certificate information may be accessed using browser-specific methods. With Internet Explorer, the lock icon along the bottom message line can be checked for certificate details. Additionally, when connecting to a NETGEAR managed switch that uses self-generated credentials, Explorer will warn the user about the authenticity of the certificate. [. . . ]