Cisco Catalyst 2960 Series, Configuration Manual

Page: 1204 / 2288

Purpose Command or Action
Configures server certificate profile and user certificate profile and
enters SSH certificate profile configuration mode. ip ssh server certificate profile
Example:
Switch(config)# ip ssh server certificate
profile
Step 5
Configures user certificate profile and enters SSH server certificate
profile user configuration mode. user
Example:
Switch(ssh-server-cert-profile)# user
Step 6
Configures the public key infrastructure (PKI) trustpoint that is used
to verify the incoming user certificate. trustpoint verify PKI-trustpoint-name
Example:
Switch(ssh-server-cert-profile-user)#
trustpoint verify trust2
Step 7
Configure multiple trustpoints by executing the same
command multiple times. A maximum of 10 trustpoints can
be configured.
Note
(Optional) Mandates the presence of the Online Certificate Status
Protocol (OCSP) response with the incoming user certificate.
ocsp-response required
Example:
Switch(ssh-server-cert-profile-user)#
ocsp-response required
Step 8
By default, the user certificate is accepted without an OCSP
response.
Note
Exits SSH server certificate profile user configuration mode and
returns to privileged EXEC mode. end
Example:
Switch(ssh-server-cert-profile-user)# end
Step 9
Verifying the Server and User Authentication Using Digital Certificates
SUMMARY STEPS
1.
enable
2. show ip ssh
DETAILED STEPS
Step 1 enable
Enables privileged EXEC mode.
• Enter your password if prompted.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1122
Verifying the Server and User Authentication Using Digital Certificates