Edge-Core ECS4660-28F, Management Manual, Page: 1061 / 2020

C
HAPTER
28
| Authentication Commands
Secure Shell
– 1061 –
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
◆ The SSH server supports up to four client sessions. The maximum
number of client sessions includes both current Telnet sessions and
SSH sessions.
◆ The SSH server uses DSA or RSA for key exchange when the client first
establishes a connection with the switch, and then negotiates with the
client to select either DES (56-bit) or 3DES (168-bit) for data
encryption.
◆ You must generate DSA and RSA host keys before enabling the SSH
server.
E
XAMPLE
Console#ip ssh crypto host-key generate dsa
Console#configure
Console(config)#ip ssh server
Console(config)#
R
ELATED
C
OMMANDS
ip ssh crypto host-key generate (1063)
show ssh (1066)
ip ssh
server-key size
This command sets the SSH server key size. Use the no form to restore the
default setting.
S
YNTAX
ip ssh server-key size key-size
no ip ssh server-key size
key-size – The size of server key. (Range: 512-896 bits)
D
EFAULT
S
ETTING
768 bits
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
The server key is a private key that is never shared outside the switch.
The host key is shared with the SSH client, and is fixed at 1024 bits.
E
XAMPLE
Console(config)#ip ssh server-key size 512
Console(config)#