Cisco Catalyst 2960 Series, Руководство по настройке

Страница: 1179 / 2288

Purpose Command or Action
Configures SSH-RSA keys for user and server authentication on the
SSH server and enters public-key configuration mode. ip ssh pubkey-chain
Example:
host1(config)# ip ssh pubkey-chain
Step 6
• The user authentication is successful if the RSA public key stored
on the server is verified with the public or the private key pair
stored on the client.
Configures the SSH username and enters public-key user configuration
mode. username username
Example:
host1(conf-ssh-pubkey)# username user1
Step 7
Specifies the RSA public key of the remote peer and enters public-key
data configuration mode. key-string
Example:
host1(conf-ssh-pubkey-user)#
key-string
Step 8
You can obtain the public key value from an open SSH client;
that is, from the .ssh/id_rsa.pub file.
Note
(Optional) Specifies the SSH key type and version. key-hash key-type key-name
Step 9
Example:
host1(conf-ssh-pubkey-data)# key-hash
ssh-rsa key1
• The key type must be ssh-rsa for the configuration of private public
key pairs.
• This step is optional only if the key-string command is configured.
• You must configure either the key-string command or the
key-hash command.
You can use a hashing software to compute the hash of the
public key string, or you can also copy the hash value from
another Cisco device. Entering the public key data using the
key-string command is the preferred way to enter the public
key data for the first time.
Note
Exits public-key data configuration mode and returns to privileged
EXEC mode. end
Example:
host1(conf-ssh-pubkey-data)# end
Step 10
• Use no hostname command to return to the default host.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1097
How to Configure Secure Shell Version 2 Support