ZyXEL Communications 200 Series - Manual (Page 691)

Chapter 43 System
ZyWALL USG 100/200 Series User’s Guide
691
43.7.2 SSH Implementation on the ZyWALL
Your ZyWALL supports SSH versions 1 and 2 using RSA authentication and four encryption
methods (AES, 3DES, Archfour and Blowfish). The SSH server is implemented on the
ZyWALL for management using port 22 (by default).
43.7.3 Requirements for Using SSH
You must install an SSH client program on a client computer (Windows or Linux operating
system) that is used to connect to the ZyWALL over SSH.
43.7.4 Configuring SSH
Click System > SSH to change your ZyWALL’s Secure Shell settings. Use this screen to
specify from which zones SSH can be used to manage the ZyWALL. You can also specify
from which IP addresses the access can come.
"
It is recommended that you disable Telnet and FTP when you configure SSH
for secure connections.
Figure 516 System > SSH
The following table describes the labels in this screen.
Table 240 System > SSH
LABEL DESCRIPTION
Enable Select the check box to allow or disallow the computer with the IP address that
matches the IP address(es) in the Service Control table to access the ZyWALL
CLI using this service.
Version 1 Select the check box to have the ZyWALL use both SSH version 1 and version 2
protocols. If you clear the check box, the ZyWALL uses only SSH version 2
protocol.
Server Port You may change the server port number for a service if needed, however you must
use the same port number in order to use that service for remote management.
Server
Certificate Select the certificate whose corresponding private key is to be used to identify the
ZyWALL for SSH connections. You must have certificates already configured in the
My Certificates screen (Click My Certificates and see
Chapter 41 on page 639 for
details).