Tuesday 18 March 2014

Cisco: Set Up an IOS Router or Switch for SSH

You may setup a Cisco router or switch for SSH with the following commands / steps:

!--- Step 1: Configure the hostname if you have not previously done so.hostname Router

!--- The aaa new-model command causes the local username and password on the router
!--- to be used in the absence of other AAA statements.

aaa new-model
username cisco password 0 cisco

!--- Step 2: Configure the DNS domain of the router.
ip domain-name rtp.cisco.com

!--- Step 3: Generate an SSH key to be used with SSH.
crypto key generate rsa
ip ssh time-out 60
ip ssh authentication-retries 2

!--- Step 4: By default the vtys' transport is Telnet. In this case,
!--- Telnet is disabled and only SSH is supported.

line vty 0 4
transport input SSH

!--- Instead of aaa new-model, you can use the login local command.


Reference:
Configuring Secure Shell on Routers and Switches Running Cisco IOS
http://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html

No comments:

Post a Comment