HP 9124 - Cisco MDS Fabric Switch, Руководство по настройке

Страница: 949 / 1444

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
39-15
Cisco MDS 9000 Family CLI Configuration Guide
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Chapter 39 Configuring Users and Common Roles
Configuring SSH Services
About SSH
SSH provides secure communications to the Cisco SAN-OS CLI. You can use SSH keys for the
following SSH options:
•
SSH1
• SSH2, using RSA
•
SSH2 using DSA
Generating the SSH Server Key-Pair
Be sure to have an SSH server key-pair with the appropriate version before enabling the SSH service.
Generate the SSH server key-pair according to the SSH client version used. The number of bits specified
for each key-pair ranges from 768 to 2048.
The SSH service accepts three types of key-pairs for use by SSH versions 1 and 2.
• The rsa1 option generates the RSA1 key-pair for the SSH version 1 protocol.
•
The dsa option generates the DSA key-pair for the SSH version 2 protocol.
• The rsa option generates the RSA key-pair for the SSH version 2 protocol.
Caution
If you delete all of the SSH keys, you cannot start a new SSH session.
To generate the SSH server key-pair, follow these steps:
Specifying the SSH Key
You can specify an SSH key to log in using the SSH client without being prompted for a password. You
can specify the SSH key in three different formats:
•
Open SSH format
• IETF SECSH format
•
Public Key Certificate in PEM format
Command Purpose
Step 1
switch# config t
Enters configuration mode.
Step 2
switch(config)# ssh key rsa1 1024
generating rsa1 key.....
generated rsa1 key
Generates the RSA1 server key-pair.
switch(config)# ssh key dsa 1024
generating dsa key.....
generated dsa key
Generates the DSA server key-pair.
switch(config)# ssh key rsa 1024
generating rsa key.....
generated rsa key
Generates the RSA server key-pair.
switch(config)# no ssh key rsa 1024
cleared RSA keys
Clears the RSA server key-pair configuration.