Cisco Catalyst 2960 Series, Configuration Manual

Page: 1158 / 2288

Purpose Command or Action
example, if the SSH client supports SSHv1 and SSHv2, the SSH server
selects SSHv2.
Configures the SSH control parameters: ip ssh { timeout seconds |
authentication-retries number
}
Step 4
• Specify the time-out value in seconds; the default is 120 seconds.
The range is 0 to 120 seconds. This parameter applies to the SSH
Example:
Switch(config)# ip ssh timeout 90
negotiation phase. After the connection is established, the Switch
uses the default time-out values of the CLI-based sessions.
authentication-retries 2
By default, up to five simultaneous, encrypted SSH connections for
multiple CLI-based sessions over the network are available (session
0 to session 4). After the execution shell starts, the CLI-based session
time-out value returns to the default of 10 minutes.
• Specify the number of times that a client can re-authenticate to the
server. The default is 3; the range is 0 to 5.
Repeat this step when configuring both parameters.
(Optional) Configures the virtual terminal line settings. Use one or both of the following:
Step 5
• line
vtyline_number
[ ending_line_number ]
• Enters line configuration mode to configure the virtual terminal line
settings. For
line_number and ending_line_number , specify a pair
of lines. The range is 0 to 15.
• transport input ssh
• Specifies that the Switch prevent non-SSH Telnet connections. This
limits the router to only SSH connections.
Example:
Switch(config)# line vty 1 10
or
Switch(config-line)# transport input
ssh
Returns to privileged EXEC mode. end
Example:
Switch(config-line)# end
Step 6
Verifies your entries. show running-config
Example:
Switch#
show running-config
Step 7
(Optional) Saves your entries in the configuration file. copy running-config startup-config
Example:
Switch# copy running-config
Step 8
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1076
How to Configure Secure Shell