Secure Shell (SSH)

SSH server enables an SSH client to make a secure and encrypted connection to a switch. Switches support SSH version 2.0 only. The user authentication mechanisms supported for SSH are public key authentication and password authentication (RADIUS, TACACS+ or locally stored password). Secure File Transfer Protocol (SFTP) provides file transfer. SSH Server and sftp-client via the copy command are supported for managing the router.

Configuration commands

(switch(config)#) Configure SSH authentication:

ssh server enable

(switch(config)#) Generate SSH server key:

ssh server host-key dsa2 private-key

NOTE:

key-type

  • rsa1 – RSAv1

  • rsa2 – RSAv2

  • dsa2 – DSAv2

  • private-key – Sets new private-key for the host keys of the specified type

  • public-key – Sets new public-key for the host keys of the specified type

  • generate – Generates new RSA and DSA host keys for SSH

(switch(config)#) Enable SSH to listen for incoming connections:

ssh server listen enable

Show commands to validate functionality

(switch#)

show ssh server

Expected results

  • Administrators can create the user account.
  • Administrators can generate working SSH keys.
  • The output of the show commands is correct.
  • Administrators can successfully connect to the switch via an SSH client using SSH 2.0.

Back to Index