https://peterpap.net/index.php?action=history&feed=atom&title=Enabling_Secure_access_with_SSHEnabling Secure access with SSH - Revision history2026-10-04T00:11:33ZRevision history for this page on the wikiMediaWiki 1.43.9https://peterpap.net/index.php?title=Enabling_Secure_access_with_SSH&diff=66&oldid=prevPpapa at 03:53, 21 September 20102010-09-21T03:53:53Z<p></p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 03:53, 21 September 2010</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l29">Line 29:</td>
<td colspan="2" class="diff-lineno">Line 29:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> login authentication local_auth</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> login authentication local_auth</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> transport input ssh</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> transport input ssh</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;"></del></div></td><td colspan="2" class="diff-side-added"></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> line vty 5 15</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> line vty 5 15</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> transport input ssh</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> transport input ssh</div></td></tr>
</table>Ppapahttps://peterpap.net/index.php?title=Enabling_Secure_access_with_SSH&diff=65&oldid=prevPpapa: Created page with "In order to be able to enable SSH access to a switch, you first need to make sure you have an IOS crypto image installed on the switch. I usually do not configure SSH or telnet ..."2010-09-21T03:53:35Z<p>Created page with "In order to be able to enable SSH access to a switch, you first need to make sure you have an IOS crypto image installed on the switch. I usually do not configure SSH or telnet ..."</p>
<p><b>New page</b></p><div>In order to be able to enable SSH access to a switch, you first need to make sure you have an IOS crypto image installed on the switch. I usually do not configure SSH or telnet on my switches. Being a paranoid Sys Admin, I prefer y switches to only be accessible from a console switch, on a secure management network. That being said, it's sometimes handy to have SSH enabled on a switch. Here's how you do it.<br />
<br />
1. Set a hostname and default domain<br />
<br />
conf t<br />
hostname somehostname<br />
ip domain-name somedomain.com<br />
<br />
2. Generate the crypto keys<br />
<br />
cry key generate rsa<br />
<br />
Choose 1024 minimum!<br />
<br />
3. Set SSH parameters<br />
<br />
ip ssh time-out 60<br />
ip ssh authentication-retries 2<br />
<br />
4. Create a username and password to log on with<br />
<br />
aaa new-model<br />
aaa authentication login local_auth local<br />
username someuser secret somepassword<br />
<br />
5. Enable SSH and disable telnet<br />
<br />
line vty 0 4<br />
login authentication local_auth<br />
transport input ssh<br />
<br />
line vty 5 15<br />
transport input ssh<br />
login authentication local_auth<br />
end<br />
<br />
6. Write your changes to flash<br />
<br />
wr mem</div>Ppapa