Configure SSH on Catalyst Switches

王朝other·作者佚名 2008-05-31

Switch Configuration

!-- Generate & verify RSA key:

sec-cat6000 (enable) set crypto key rsa 1024

Generating RSA keys..... [OK]

sec-cat6000 (enable) ssh_key_PRocess: host/server key size: 1024/768

!-- Display the RSA key:

sec-cat6000 (enable) show crypto key

RSA keys were generated at: Mon Jul 23 2001, 15:03:30 1024 65537 1514414695360

577332853671704785709850606634768746869716963940352440620678575338701550888525

699691478330537840066956987610207810959498648179965330018010844785863472773067

697185256418386243001881008830561241137381692820078674376058275573133448529332

1996682019301329470978268059063378215479385405498193061651

!-- Restrict which host/subnets are allowed to use SSH to the switch.

Note: If you do not do this, the switch will display WARNING!! ip permit list has no entries!

sec-cat6000 set ip permit 172.18.124.0 255.255.255.0

172.18.124.0 with mask 255.255.255.0 added to IP permit list.

!-- Turn on SSH.

sec-cat6000 (enable) set ip permit enable ssh

SSH permit list enabled.

!-- Verity SSH permit list.

sec-cat6000 (enable) sho ip permit

Telnet permit list disabled.

Ssh permit list enabled.

Snmp permit list disabled.

Permit List Mask access-Type

172.18.124.0 255.255.255.0 telnet ssh snmp

Denied IP Address Last Accessed Time Type