148
MES1000, MES2000 Ethernet Switches
ip ssh password-auth
Disabled by default
Enable password authentication mode.
no ip ssh password-auth
Disable password authentication mode.
crypto key pubkey-chain
ssh
By default, the key is not
created.
Enter the public key configuration mode.
crypto key generate dsa
-
Generate DSA key pair—private and public for SSH service.
If one of the keys from the pair has been already
created, the system will prompt to overwrite this key.
crypto key generate rsa
-
Generate RSA key pair—private and public for SSH service.
If one of the keys from the pair has been already
created, the system will prompt to overwrite this key.
ip ftp server
FTP server is enabled by
default.
Enable FTP server.
no ip ftp server
Disable FTP server.
ip http port
port
1..65535/80
Define HTTP server port.
no ip http port
Restore the default value.
ip http secure-port
port
1..65535/443
Define HTTPS server port.
no ip http secure-port
Restore the default value.
ip http secure-server
HTTPS server is disabled by
default.
Enable HTTPS server.
no ip http secure-server
Disable HTTPS server.
ip http server
HTTP server is enabled by
default.
Enable HTTP server.
no ip http server
Disable HTTP server.
ip http timeout-policy
seconds
0..86400/600
Define the HTTP session timeout.
no ip http timeout-policy
Restore the default value.
Ip https certificate {1|2}
1
Define the active HTTPS certificate.
crypto certificate {1|2}
generate
Generate SSL certificate.
crypto certificate {1|2}
import
Import SSL certificate issued by the certification center.
Keys generated with crypto key generate rsa and crypto key generate dsa commands are
saved in the secure configuration file.
Public key configuration mode commands
Command line request in public key configuration mode appears as follows:
console#
configure
console(config)#
crypto key pubkey-chain ssh
console(config-pubkey-chain)#
Table 5.162 —Public key configuration mode commands
Command
Value
Action
user-key
username
{
rsa
|
dsa}
(1..48) characters
Enter the individual public key generation mode.
-
rsa
—generate RSA key
-
dsa
—generate DSA key
no user-key
username
Remove the public key for the specific user.
Command line request in individual public key generation mode appears as follows:
console#
configure
console(config)#
crypto key pubkey-chain ssh
console(config-pubkey-chain)#
user-key
eltex
rsa
console(config-pubkey-key)#
Table 5.163 —Individual public key generation mode commands
Command
Action
key-string
Create the public key for the specific user.