N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 86
Secure Shell Server configuration
Telnet traffic on the network is not secure. These commands enable Secure Shell (SSH) access from any SSH
client. The SSH program securely logs into another computer over a network and executes commands in a secure
environment. All data using SSH is encrypted.
Secure Shell can be configured on the switch using the console port and Telnet only. The commands are not
available if you access the switch using the Browser-based Interface (BBI).
NOTE: See the
N8406-023 1Gb Intelligent L3 Switch Application Guide
for information on SSH.
The following table describes the SSHD Configuration commands.
Table 79 SSHD Configuration commands
Command
Description
ssh interval
<
0-24
>
Defines interval for auto-generating the RSA server key. The switch will auto-
generate the RSA server key at the interval defined in this command. The range
is 0-24 hours.
The value of zero (0) means the RSA server key auto-generation is disabled. If
the switch has been busy performing any other key generation and the assigned
time of interval expires, the RSA server will skip generating the key.
Command mode
: Global configuration
ssh scp-password
Defines the administrator password that is for Secure Copy (SCP) only. The
username for this SCP administrator is
scpadmin
.
Typically, SCP is used to copy files securely from one machine to another. In the
switch, SCP is used to download and upload the switch configuration using
secure channels.
Command mode
: Global configuration
ssh generate-host-key
Generates the RSA host keys manually. The switch creates this key
automatically while configuring the switch with Secure Shell (SSH). But you can
generate the key manually by using this command if you need to overwrite the
key for security reasons. The command will take effect immediately.
Command mode
: Global configuration
ssh generate-server-key
Generates the RSA server key. The switch creates this key automatically while
configuring the switch with Secure Shell (SSH). You can generate the key
manually by using this command if you need to overwrite the key for security
reasons. The command will take effect immediately.
Command mode
: Global configuration
ssh port
<
TCP port
number
>
Sets the SSH server port number.
Command mode
: Global configuration
ssh scp-enable
Enables the SCP apply and save.
Command mode
: Global configuration
no ssh scp-enable
Disables the SCP apply and save. This is the default for SCP.
Command mode
: Global configuration
ssh enable
Enables the SSH server.
Command mode
: Global configuration
no ssh enable
Disables the SSH server. This is the default for the SSH server.
Command mode
: Global configuration
show ssh
Displays the current SSH server configuration.
Command mode
: All except User EXEC
