Cisco Equipment Configuration SSH login

Cisco's products currently only support SSH-1, does not support SSH-2, IOS support SSH features Version includes K3 or K4(K3 is a 56bit SSH encryption、K4 is a 168bit SSH encryption), Now is the K8 K9

1、 Configuration “hotstneme” and “ip domain-name”

Router#configure terminal

Router(config)#hostname test

test(config)#ip domain-name toerd18f -------Configuration SSH Necessary

2、 Configuration“userneme” and “password”

test(config)#username test password 0 test

Note:add a user：test，password：test

test(config)#line vty 0 4

test(config-line)#login local

test(config-line)#transport input ssh ----- Only allowed to log on using SSH

Note：Prohibition telnet and Switching engine session!

3、 Configuration SSH Server

test(config)#crypto key generate rsa

The name for the keys will be: TEST-GSR12008.jx.cn.net

Note：SSH the keyword is hostname + . +ip domain-name

Choose the size of the key modulus in the range of 360 to 2048 for your

General Purpose Keys. Choosing a key modulus greater than 512 may take

a few minuts

How many bits in the modulus [512]: Note: Select the encryption digits, default

Generating RSA keys ...

[OK]

Usr command “show ip ssh”

SSH Enabled - version 1.99

Authentication timeout: 120 secs; Authentication retries:3

Now SSH service is started, if you need to stop SSH service, use the following command

test(config)#crypto key zeroize rsa

4、 Configuration SSH parameter

Usr “show run”command see the SSH default parameters：timeout is limited 120seconds，Authentication the number of retries to 3 times，use following command can be modified：

test(config)#ip ssh {[time-out seconds]} │ [authentication-retries interger]}

ensample timeout limited 180seconds：

//ensample：test(config)# ip ssh time-out 180

Ensample the number of retries to 5 times：

//ensample：test(config)# ip ssh authentication-retries

NOTE:

1、 Use SSH login must use SSH1

2、 Do not use any compression format

Enable aaa the SSH configuration

test(config)#ip domain-name runway.cn.net 设置域名

test(config)#aaa new-modle 启用AAA服务

test(config)#crypto key generate rsa 生成秘钥

The name for the keys will be: Router1.runway.cn.net

Choose the size of the key modulus in the range of 360 to 2048 for your

General Purpose Keys. Choosing a key modulus greater than 512 may take

a few minutes.

How many bits in the modulus [512]: 1024 指定1024位秘钥

% Generating 1024 bit RSA keys ...[OK]

test(config)#username sshuser secret sshpassword 指定SSH登陆用户名和密码

test(config)#ip ssh time-out 30 设定SSH超时值

test(config)#no ip ssh version 启用SSH V1 V2

test(config)#aaa authentication login ssh local line none 设定SSH登陆信息存储地方

test(config)#ip access-list standard forssh 定义SSH登陆源地址

permit any

test(config)#line vty 0 4
test(config-line)#exec-timeout 30 设置线路登陆超时值

test(config-line)#login authentication ssh 指定验证登陆用户信息存储的地方

test(config-line)#transport input ssh 设置线路登陆模式为SSH

test(config)#access-class forssh in 应用访问列表

Is not enable aaa the SSH configuration

test(config)#hostname Router1

test(config)#ip domain-name runway.cn.net

test(config)#crypto key generate rsa

The name for the keys will be: Router1.runway.cn.net

Choose the size of the key modulus in the range of 360 to 2048 for your

General Purpose Keys. Choosing a key modulus greater than 512 may take

a few minutes.

How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys ...[OK]

test(config)#username sshuser secret sshpassword

test(config)#ip ssh time-out 30

test(config)#no ip ssh version

test(config)#ip access-list standard forssh

test(config)#permit any

test(config)#line vty 0 4

test(config-line)#exec-timeout 30

test(config-line)#login local

test(config-line)#transport input ssh

test(config)#access-class forssh in

转载于:https://blog.51cto.com/icedot/318737

Cisco Equipment Configuration SSH login相关推荐

How To Fix: SCP And SSH Login Prompt Is Very Sl...
2019独角兽企业重金招聘Python工程师标准>>> For my case, the GSSAPI authentication feature was causing the ...
cisco 请用ssh+3A认证取代telnet远程登录
SSH 的安全性 SSH的英文全称为Secure Shell,它默认的连接端口是22.通过使用SSH,可以把所有传输的数据进行加密,这样类似上面的"中间人"***方式就不可能实现了 ...
Cisco 交换机/路由器 ssh 配置
一准备工作: 1.开启交换机/路由器 2.连击Console控制线,到控制电脑 3.打开com口控制软件(支持ssh协议) 二配置工作: 1.进入特权模式 Cisco> enable 2.输入密 ...
Passwordless SSH Login
原文地址:http://manjeetdahiya.com/2011/03/03/passwordless-ssh-login/ Consider two machines A and B. We w ...
cisco switch configuration
Switch>ena Switch#configure terminal 进入全局配置模式 Switch(config)#vlan 2 //建立一个vlan 2 Switch(co ...
How to speed my too-slow ssh login?
http://unix.stackexchange.com/questions/5621/how-to-speed-my-too-slow-ssh-login Edit your "/etc ...
升级cisco 3750G的IOS支持高级路由与ssh功能
为了能让cisco交换的远程连接对于账号密码的安全性有所提高,可以用ssh方式连接终端,但是很多出厂的交换机默认的ios是不支持ssh这个功能的,为了能让cisco交换机支持ssh,必须升 ...
Cisco PT 案例二：为路由器配置并连接SSH
1. 案例目标通过本案例,你可以掌握如下技能: 配置 SSH 使用 SSH 访问路由器 2. 背景知识过去对路由器的远程管理访问一般使用 TCP 端口 23 上的 Telnet.但 Telnet ...
CISCO 3560G-48TL SSH及telnet问题
转载学习 CISCO 3560G-48TL SSH及telnet问题主要是是关于CISCO3560G配置SSH后还可以用telnet登陆. 情况描述: 现有设备CISCO3560G-48TL 软件 ...

Cisco Equipment Configuration SSH login

Cisco Equipment Configuration SSH login相关推荐

最新文章

热门文章