Configuring Secure Shell (SSH)

Prerequisite for Using SSH

■Local password or username: A Manager-level or Operator-level pass­ word configured in the switch.

■SSH Enabled: (1) A public/private key pair has been generated on the switch (generate ssh [dsa rsa]) and (2) SSH is enabled (ip ssh). (You can generate a key pair without enabling SSH, but you cannot enable SSH without first generating a key pair. See “2. Generating the Switch’s Public and Private Key Pair” on page 7-9and “4. Enabling SSH on the Switch and Anticipating SSH Client Contact Behavior” on page 7-15.)

Prerequisite for Using SSH

Before using the switch as an SSH server, you must install a publicly or commercially available SSH client application on the computer(s) you use for management access to the switch. If you want client public-key authentication (page 7-2), then the client program must have the capability to generate or import keys.

Public Key Formats

Any client application you use for client public-key authentication with the switch must have the capability to export public keys. The switch can accept keys in the PEM-Encoded ASCII Format or in the Non-Encoded ASCII format.

 

 

 

 

 

 

 

 

Beginning of actual SSHv2

 

 

Comment

 

 

 

describing public

 

public key in PEM-Encoded

 

 

 

 

 

 

Figure 7-3. Example of Public Key in PEM-Encoded ASCII Format Common for SSHv2 Clients

7-4