Configuring Username and Password Security

Saving Security Credentials in a Config File

The SSH security credential that is stored in the running configuration file is configured with the ip ssh public-keycommand used to authenticate SSH clients for manager or operator access, along with the hashed content of each SSH client public-key.

Syntax: ip ssh public-key <manager operator> keystring

Set a key for public-key authentication.

 

manager: allows manager-level access using SSH public-key

 

authentication.

 

operator: allows operator-level access using SSH public-key

 

authentication.

 

keystring”:. a legal SSHv2 (RSA or DSA) public key. The text

 

string for the public key must be a single quoted token. If the

 

keystring contains double-quotes, it can be quoted with single

 

quotes ('keystring'). The following restrictions for a

 

keystring apply:

 

A keystring cannot contain both single and double quotes.

 

A keystring cannot have extra characters, such as a blank

 

space or a new line. However, to improve readability, you

 

can add a backlash at the end of each line.

 

 

N o t e

The ip ssh public-keycommand allows you to configure only one SSH client

 

public-key at a time. The ip ssh public-keycommand behavior includes an

 

implicit append that never overwrites existing public-key configurations on a

 

running switch.

 

If you download a software configuration file that contains SSH client public-

 

key configurations, the downloaded public-keys overwrite any existing keys,

 

as happens with any other configured values.

 

 

2-17