Nortel - SSH -versus- Non-SSH codes ** WARNING **
DComTalk.com Forum Index DComTalk.com
Discussion of VoIP, VPN, Video Conferencen, DSL and other data commucations.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web dcomtalk.com
Nortel - SSH -versus- Non-SSH codes ** WARNING **

 
Post new topic   Reply to topic    DComTalk.com Forum Index -> Bay Networks
Author Message
Mike Farnham
Guest





Posted: Thu Sep 16, 2004 6:22 pm    Post subject: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

Hey gang -

You may or may not be aware but Nortel has been releasing 2 versions
of code lately for their switches - one is a SSH version and one is a
Non-SSH version.

The SSH version will eliminate your text menus when you telnet/console
into the switch. I called them about this, and this is a security
feature. So if you do not know the Nortel CLI very well, then do not
install the SSH version.

For example, on the 5510 switches there is a new version:

4.0.1.32 (Non-SSH) and
4.0.1.33s (SSH)

We want to put on SSH, but are not happy about the loss of the menu,
so we're holding off on it. The CLI is very similar to Cisco's so that
helps, but the menu is nice to have. There is no way to invoke the
menu either once the SSH code is on there, BTW.

Anyhow, I wanted to make sure the word was out there about this.
Comments?? Post em - Thanks, Mike
Back to top
Rick Harris
Guest





Posted: Fri Sep 17, 2004 5:29 pm    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

mike.farnham@co.manatee.fl.us (Mike Farnham) wrote in message news:<af3623de.0409160622.4d37f696@posting.google.com>...
Quote:
Hey gang -

You may or may not be aware but Nortel has been releasing 2 versions
of code lately for their switches - one is a SSH version and one is a
Non-SSH version.

The SSH version will eliminate your text menus when you telnet/console
into the switch. I called them about this, and this is a security
feature. So if you do not know the Nortel CLI very well, then do not
install the SSH version.

For example, on the 5510 switches there is a new version:

4.0.1.32 (Non-SSH) and
4.0.1.33s (SSH)

We want to put on SSH, but are not happy about the loss of the menu,
so we're holding off on it. The CLI is very similar to Cisco's so that
helps, but the menu is nice to have. There is no way to invoke the
menu either once the SSH code is on there, BTW.

Anyhow, I wanted to make sure the word was out there about this.
Comments?? Post em - Thanks, Mike

Do you lose the web interface too ?
Back to top
Charles R. Anderson
Guest





Posted: Sat Sep 18, 2004 2:55 pm    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

Mike Farnham <mike.farnham@co.manatee.fl.us> wrote:
Quote:
The SSH version will eliminate your text menus when you telnet/console
into the switch. I called them about this, and this is a security
feature. So if you do not know the Nortel CLI very well, then do not
install the SSH version.

It is most likely not as much a security issue as an issue of space to
store both the SSH code and the menu code in same firmware image. Due
to the limited resources of flash/memory space, they give you a choice
of either menus/no SSH or SSH/no menus.
Back to top
Mike Farnham
Guest





Posted: Mon Sep 20, 2004 6:18 pm    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

I am not aware that the web interface is lost. I usually use the
Device Manager and Nortel told me they are pushing people to use the
device manager and that's part of the reason for the text menu going
away.



rick.harris@scdmv.net (Rick Harris) wrote in message news:<96aff1fe.0409170529.ad7d7e3@posting.google.com>...
Quote:
mike.farnham@co.manatee.fl.us (Mike Farnham) wrote in message news:<af3623de.0409160622.4d37f696@posting.google.com>...
Hey gang -

You may or may not be aware but Nortel has been releasing 2 versions
of code lately for their switches - one is a SSH version and one is a
Non-SSH version.

The SSH version will eliminate your text menus when you telnet/console
into the switch. I called them about this, and this is a security
feature. So if you do not know the Nortel CLI very well, then do not
install the SSH version.

For example, on the 5510 switches there is a new version:

4.0.1.32 (Non-SSH) and
4.0.1.33s (SSH)

We want to put on SSH, but are not happy about the loss of the menu,
so we're holding off on it. The CLI is very similar to Cisco's so that
helps, but the menu is nice to have. There is no way to invoke the
menu either once the SSH code is on there, BTW.

Anyhow, I wanted to make sure the word was out there about this.
Comments?? Post em - Thanks, Mike

Do you lose the web interface too ?
Back to top
Walter Roberson
Guest





Posted: Mon Sep 20, 2004 8:00 pm    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

In article <af3623de.0409200618.5f24ac82@posting.google.com>,
Mike Farnham <mike.farnham@co.manatee.fl.us> wrote:
:I am not aware that the web interface is lost. I usually use the
:Device Manager and Nortel told me they are pushing people to use the
:device manager and that's part of the reason for the text menu going
:away.

Hmmm -- the 5510 is currently our #2 choice for our upcoming network
expansion, but I really don't want to be configuring or managing
my network using Device Manager!

I had numerous problems with Device Manager years ago when we first
received our Accelar 1150 -- couldn't configure devices the way I
wanted, was clumsy for a number of operations, DM would hang, and
if we were doing any serious DM reconfiguration work, the Accelar 1150
itself would hang when we used DM. So I put it aside and didn't even
-try- to use it for years.

It so happens that a few weeks ago, I loaded the latest DM and gave
it a whirl. Slow slow slow slow slow!!! Several minutes just to bring
it up, and delays of several seconds for -everything- I did. Unusuable
as a configuration or monitoring tool, or at least unusable if one
does not use much faster equipment than I was using (800 MHz, 512 Mb.)
--
Warning: potentially contains traces of nuts.
Back to top
MC
Guest





Posted: Tue Sep 21, 2004 2:32 am    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

not sure why it is slow on that fast of a machine, it does OK for us on
similar machine, however a fster machine does much better.
It is Java based and much improved.


"Walter Roberson" <roberson@ibd.nrc-cnrc.gc.ca> wrote in message
news:cimuq4$moh$1@canopus.cc.umanitoba.ca...
Quote:
In article <af3623de.0409200618.5f24ac82@posting.google.com>,
Mike Farnham <mike.farnham@co.manatee.fl.us> wrote:
:I am not aware that the web interface is lost. I usually use the
:Device Manager and Nortel told me they are pushing people to use the
:device manager and that's part of the reason for the text menu going
:away.

Hmmm -- the 5510 is currently our #2 choice for our upcoming network
expansion, but I really don't want to be configuring or managing
my network using Device Manager!

I had numerous problems with Device Manager years ago when we first
received our Accelar 1150 -- couldn't configure devices the way I
wanted, was clumsy for a number of operations, DM would hang, and
if we were doing any serious DM reconfiguration work, the Accelar 1150
itself would hang when we used DM. So I put it aside and didn't even
-try- to use it for years.

It so happens that a few weeks ago, I loaded the latest DM and gave
it a whirl. Slow slow slow slow slow!!! Several minutes just to bring
it up, and delays of several seconds for -everything- I did. Unusuable
as a configuration or monitoring tool, or at least unusable if one
does not use much faster equipment than I was using (800 MHz, 512 Mb.)
--
Warning: potentially contains traces of nuts.
Back to top
Mike Farnham
Guest





Posted: Tue Sep 21, 2004 3:29 pm    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

roberson@ibd.nrc-cnrc.gc.ca (Walter Roberson) wrote in message news:<cimuq4$moh$1@canopus.cc.umanitoba.ca>...
Quote:
In article <af3623de.0409200618.5f24ac82@posting.google.com>,
Mike Farnham <mike.farnham@co.manatee.fl.us> wrote:
:I am not aware that the web interface is lost. I usually use the
:Device Manager and Nortel told me they are pushing people to use the
:device manager and that's part of the reason for the text menu going
:away.

Hmmm -- the 5510 is currently our #2 choice for our upcoming network
expansion, but I really don't want to be configuring or managing
my network using Device Manager!

....well that was some time ago and the newer versions are very stable.
I am running mine on a 350mhz Windows NT PC with 192MB RAM and it does
take a little bit to load (it's 160 megs so I am not expecting a
racehorse)

As far as configuring - one the program is loaded, it runs just fine
opewrationally and speed-wise. No complaints. Been using it in one
form or another for 5 years now and it has only gotten better.


Quote:
I had numerous problems with Device Manager years ago when we first
received our Accelar 1150 -- couldn't configure devices the way I
wanted, was clumsy for a number of operations, DM would hang, and
if we were doing any serious DM reconfiguration work, the Accelar 1150
itself would hang when we used DM. So I put it aside and didn't even
-try- to use it for years.

....again, it is MUCH better now than those days...


Quote:
It so happens that a few weeks ago, I loaded the latest DM and gave
it a whirl. Slow slow slow slow slow!!! Several minutes just to bring
it up, and delays of several seconds for -everything- I did. Unusuable
as a configuration or monitoring tool, or at least unusable if one
does not use much faster equipment than I was using (800 MHz, 512 Mb.)

....version 5.8.2.1 ?? Solid as a rock. Works great for monitoring and
configuration. Not sure why your setup is having issues - unless
there's a java conflict or something.
Back to top
Paul Tichy
Guest





Posted: Sun Sep 26, 2004 12:37 am    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

------------------------
From: Walter Roberson <roberson@ibd.nrc-cnrc.gc.ca>
Subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING **
Date: 20 Sep 2004 16:00:04 GMT
To: "comp.dcom.sys.bay-networks"

In article <af3623de.0409200618.5f24ac82@posting.google.com>,
Mike Farnham <mike.farnham@co.manatee.fl.us> wrote:
:I am not aware that the web interface is lost. I usually use the
:Device Manager and Nortel told me they are pushing people to use the
:device manager and that's part of the reason for the text menu going
:away.

Hmmm -- the 5510 is currently our #2 choice for our upcoming network
expansion, but I really don't want to be configuring or managing
my network using Device Manager!

I had numerous problems with Device Manager years ago when we first
received our Accelar 1150 -- couldn't configure devices the way I
wanted, was clumsy for a number of operations, DM would hang, and
if we were doing any serious DM reconfiguration work, the Accelar 1150
itself would hang when we used DM. So I put it aside and didn't even
-try- to use it for years.

It so happens that a few weeks ago, I loaded the latest DM and gave
it a whirl. Slow slow slow slow slow!!! Several minutes just to bring
it up, and delays of several seconds for -everything- I did. Unusuable
as a configuration or monitoring tool, or at least unusable if one
does not use much faster equipment than I was using (800 MHz, 512 Mb.)
--
Warning: potentially contains traces of nuts.

---------------End of Original Message-----------------

I use the latest JDM on a 200Mhz PII with 64M and it runs
just fine. I'm not saying you didn't see what you saw, but
there may be reasons other than the product itself.

Anyway.

Please make no claim or assumption Nortel is "pushing" JDM.
If a Nortel employee recommends JDM it may be an expression
of his preference; I happen to like it; but Nortel is not
trying to sway users toward any particular utility. If it
did, they wouldn't offer products with menus/cli/web/snmp
configuration tools. That isn't my opinion, it's by design.

You pick the UI you like, that's just one reason to buy Nortel.

The menus were removed from the SSH images for internal
development and technical reasons. There has always
been discussion about putting them back (may be on the
plan, I haven't looked). If you have a need for it please
contact your local Nortel engineer and fill him in on
your requirements.

/*
Paul Tichy Houston 281-260-4849
Southwest District Achitect, Switching Solutions
Nortel Networks
*/
Back to top
Michael Roberts
Guest





Posted: Wed Oct 13, 2004 8:47 pm    Post subject: Re: Nortel - SSH -versus- Non-SSH codes ** WARNING ** Reply with quote

We are using the 4.0.1 image on our BS5510s. This image supports
SSH/Telnet/SNMP/HTTP. It also gives you the choice of the NNCLI or menu
interface with Telnet and SSH.

We have traditionaly used the menu interface on all of the Baystack type
devices we have owned; however, we are finding that several configuration
options such as SSH and CANA (custom autonegoiate advertisements) can not be
configured through the menu inteface.

Not sure what Nortel's roadmap is for adding configuration of these options
into the menu interface, so we have re-written our SOPs based on the CLI.
We are finding the CLI can be every bit as fast as configuring via the menu
interface.

-mike

"Charles R. Anderson" <craIHateSpam@wpi.edu> wrote in message
news:slrnckoj3a.bfe.craIHateSpam@angus.ind.WPI.EDU...
Quote:
Mike Farnham <mike.farnham@co.manatee.fl.us> wrote:
The SSH version will eliminate your text menus when you telnet/console
into the switch. I called them about this, and this is a security
feature. So if you do not know the Nortel CLI very well, then do not
install the SSH version.

It is most likely not as much a security issue as an issue of space to
store both the SSH code and the menu code in same firmware image. Due
to the limited resources of flash/memory space, they give you a choice
of either menus/no SSH or SSH/no menus.
Back to top
 
Post new topic   Reply to topic    DComTalk.com Forum Index -> Bay Networks All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




VoIP Solutions: Telephone Systems Electronics Satellite TV Tech & Gadgets
Powered by phpBB