Dell Force10 Z9000, Справочное руководство

Страница: 1324 / 1483

crypto key generate
Generate keys for the SSH server.
C-Series, E-Series, S-Series, Z-Series, S4810
Syntax
NOTE: Some of the parameters in this command require licensing to access. For more
information, contact your Dell Force10 representative.
crypto key generate {rsa | rsa1}
Parameters
rsa Enter the keyword
rsa
followed by the key size to generate a SSHv2
RSA host keys. The range is 1024 to 2048 if you did not enable FIPS
mode; if you enabled FIPS mode, you can only generate a 2048-bit
key. The default is 1024.
NOTE: You must have a license to access the FIPS mode. For
more information, contact your Dell Force10 representative.
rsa1 Enter the keyword
rsa1
followed by the key size to generate a
SSHv1 RSA host keys. The range is 1024 to 2048. The default is 1024.
NOTE: This option is not available in FIPS mode.
Defaults Key size 1024; if you enable FIPS mode, the key size is 2048.
Command Modes CONFIGURATION
Command History
Version 8.3.11.1 Introduced on the Z9000.
Version 8.3.12.0 Added support for FIPS mode on the S4810.
Version 8.3.7.0 Introduced on the S4810.
Version 7.6.1.0 Introduced on the S-Series.
Version 7.5.1.0 Introduced on the C-Series.
pre-Version
6.1.1.0 Introduced on the E-Series.
Usage
Information
The host keys are required for key-exchange by the SSH server. If the keys are not found when
you enable the server (
ip ssh server enable
), the keys are automatically generated.
This command requires user interaction and generates a prompt prior to overwriting any
existing host keys.
NOTE: Only a user with superuser permissions should generate host-keys.
Example
FTOS#conf
FTOS(conf)#crypto key generate rsa1
Enter key size <1024-2048>. Default<1024>: 1024
Host key already exists. Do you want to replace. [y/n] :y
FTOS(conf)#
1324