4 Command Line Interface

Command Usage

This command stores the host key pair in memory (i.e., RAM). Use the ip ssh save host-keycommand to save the host key pair to flash memory.

Some SSH client programs automatically add the public key to the known hosts file as part of the configuration process. Otherwise, you must manually create a known hosts file and place the host public key in it.

The SSH server uses this host key to negotiate a session key and encryption method with the client trying to connect to it.

Example

Console#ip ssh crypto host-key generate dsa

Console#

Related Commands

ip ssh crypto zeroize (4-38) ip ssh save host-key(4-39)

ip ssh crypto zeroize

This command clears the host key from memory (i.e. RAM).

Syntax

ip ssh crypto zeroize [dsa rsa]

dsa – DSA key type.

rsa – RSA key type.

Default Setting

Clears both the DSA and RSA key.

Command Mode

Privileged Exec

Command Usage

This command clears the host key from volatile memory (RAM). Use the no ip ssh save host-keycommand to clear the host key from flash memory.

The SSH server must be disabled before you can execute this command.

Example

Console#ip ssh crypto zeroize dsa

Console#

Related Commands

ip ssh crypto host-key generate (4-37) ip ssh save host-key(4-39)

no ip ssh server (4-35)

4-38