Cisco Sx350, Cli Manual

Page: 1220 / 1323

Telnet, Secure Shell (SSH) and Secure Login (Slogin) Commands
1219 Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
64
User Guidelines
This command enables password key authentication by a local SSH server of
remote SSH clients.
The local SSH server advertises all enabled SSH authentication methods and
remote SSH clients are responsible for choosing one of them.
After a remote SSH client is successfully authenticated by public key, the client
must still be AAA-authenticated to gain management access to the device.
If no SSH authentication method is enabled, remote SSH clients must still be
AAA-authenticated before being granted management access to the device.
Example
The following example enables password authentication of the SSH client.
switchxxxxxx(config)#
ip ssh password-auth
64.5 ip ssh pubkey-auth
Use the ip ssh pubkey-auth Global Configuration mode command to enable public
key authentication of incoming SSH sessions.
Use the no form of this command to disable this function.
Syntax
ip ssh pubkey-auth [auto-login]
no ip ssh pubkey-auth
Parameters
•
auto-login—Specifies that the device management AAA authentication (CLI
login) is not needed. By default, the login is required after the SSH
authentication.
Default Configuration
Public key authentication of incoming SSH sessions is disabled.
Command Mode
Global Configuration mode