Cisco Catalyst 2960 Series, Configuration Manual

Page: 1177 / 2288

Purpose Command or Action
Enters global configuration mode. configure terminal
Example:
Device# configure terminal
Step 2
Specifies the RSA key pair to be used for SSH.
ip ssh rsa keypair-name keypair-name
Step 3
Example:
Device(config)# ip ssh rsa keypair-name
sshkeys
A Cisco device can have many RSA key
pairs.
Note
Enables the SSH server for local and remote authentication
on the device. crypto key generate rsa usage-keys label
key-label modulus modulus-size Step 4
Example:
Device(config)# crypto key generate rsa
usage-keys label sshkeys modulus 768
• For SSH Version 2, the modulus size must be at least
768 bits.
To delete the RSA key pair, use the
crypto key
zeroize rsa command. When you delete the RSA
key pair, you automatically disable the SSH server.
Note
Configures SSH control variables on your device. ip ssh [ time-out seconds | authentication-retries
integer ]
Step 5
Example:
Device(config)# ip ssh time-out 12
Specifies the version of SSH to be run on the device. ip ssh version 2
Example:
Device(config)# ip ssh version 2
Step 6
Exits global configuration mode and enters privileged EXEC
mode.
exit
Example:
Device(config)# exit
Step 7
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1095
How to Configure Secure Shell Version 2 Support