Cisco Catalyst 2960 Series, Configuration Manual

Page: 1151 / 2288

C H A P T E R
45
Configuring Secure Shell
The Secure Shell (SSH) feature is an application and a protocol that provides a secure replacement to the
Berkeley r-tools. The protocol secures sessions using standard cryptographic mechanisms, and the application
can be used similarly to the Berkeley rexec and rsh tools. Two versions of SSH are available: SSH Version
1 and SSH Version 2.
• Finding Feature Information, page 1069
• Prerequisites for Configuring Secure Shell, page 1069
• Restrictions for Configuring Secure Shell, page 1070
• Information about SSH, page 1070
• How to Configure Secure Shell, page 1073
• Configuration Examples for Secure Shell, page 1085
• Additional References for Secure Shell, page 1087
• Feature Information for SSH, page 1088
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and
feature information, see Bug Search Tool and the release notes for your platform and software release. To
find information about the features documented in this module, and to see a list of the releases in which each
feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support.
To access Cisco Feature Navigator, go to
http://www.cisco.com/go/cfn . An account on Cisco.com is not
required.
Prerequisites for Configuring Secure Shell
The following are the prerequisites for configuring the switch for secure shell (SSH):
• For SSH to work, the switch needs an Rivest, Shamir, and Adleman (RSA) public/private key pair. This
is the same with Secure Copy Protocol (SCP), which relies on SSH for its secure transport.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1069