8-10
Cisco ASR 1000 Series Aggregation Services Routers Software Configuration Guide
OL-16506-10
Chapter 8 Console Port, Telnet, and SSH Handling
Configuring Persistent SSH
Examples
In the following example, a transport map that will make all SSH connections wait for the vty line to
become active before connecting to the router is configured and applied to the Management Ethernet
interface (interface gigabitethernet 0). The RSA keypair is named sshkeys.
This example only uses the commands required to configure persistent SSH.
Router(config)# transport-map type persistent ssh sshhandler
Router(config-tmap)# connection wait allow
Router(config-tmap)# rsa keypair-name sshkeys
Router(config-tmap)# transport interface gigabitethernet 0
In the following example, a transport map is configured that will apply the following settings to any users
attempting to access the Management Ethernet port via SSH:
•
Users using SSH will wait for the vty line to become active, but will enter diagnostic mode if the
attempt to access IOS through the vty line is interrupted.
•
The RSA keypair name is sshkeys
•
The connection allows one authentication retry.
•
The banner “
--Welcome to Diagnostic Mode--
” will appear if diagnostic mode is entered as a
result of SSH handling through this transport map.
•
The banner “
--Waiting for vty line--
” will appear if the connection is waiting for the vty line
to become active.
The transport map is then applied to the interface when the
transport type persistent ssh input
command is entered to enable persistent SSH:
Router(config)# transport-map type persistent ssh sshhandler
Router(config-tmap)# connection wait allow interruptible
Step 8
time-out
timeout-interval
Example:
Router(config-tmap)#
time-out 30
(Optional) Specifies the SSH time-out interval in seconds.
The default
timeout-interval
is 120 seconds.
Step 9
transport interface gigabitethernet 0
Example:
Router(config-tmap)#
transport interface
gigabitethernet 0
Applies the transport map settings to the Management
Ethernet interface (interface gigabitethernet 0).
Persistent SSH can only be applied to the Management
Ethernet interface on the Cisco ASR 1000 Series Routers.
Step 10
exit
Example:
Router(config-tmap)#
exit
Exits transport map configuration mode to re-enter global
configuration mode.
Step 11
transport type persistent ssh input
transport-map-name
Example:
Router(config)#
transport type persistent ssh
input sshhandler
Applies the settings defined in the transport map to the
Management Ethernet interface.
The
transport-map-name
for this command must match the
transport-map-name
defined in the
transport-map type
persistent ssh
command.
Command or Action
Purpose
