
2-211
Cisco SCE 8000 CLI Command Reference
Chapter 2 CLI Command Reference
ip ssh key
ip ssh key
Generates or removes the SSH key set. A set of keys must be generated at least once before enabling the
SSH server.
ip ssh key [generate | remove]
Syntax Description
Command Default None
Command Modes Global configuration
Command History This table includes the following release-specific history entries:
Usage Guidelines Each SSH server should define a set of keys (DSA2, RSA2, and RSA1) to be used when communicating
with various clients. The key sets are pairs of public and private keys. The server publishes the public
key, while keeping the private key in nonvolatile memory. The private key is never transmitted to SSH
clients.
Note that the keys are kept on the /system/ file, which means that a person with knowledge of the enable
password can access both the private and public keys. The SSH server implementation provides
protection against eavesdroppers who can monitor the management communication channels of the
Cisco SCE platform, but it does not provide protection against a user with knowledge of the enable
password.
When using an SSH server, you should also enable the SSH server (ip ssh command).
Authorization: admin
Examples The following example shows how to generate a new SSH key set:
SCE8000>enable 10
Password:<cisco>
SCE8000#config
SCE8000(config)#ip ssh key generate
SCE8000(config)#
generate Generates a new SSH key set and saves it to nonvolatile memory. Key size
is always 2048 bits.
remove Removes the existing key set.
Release Modification
2.5.7 This command was introduced.
Commenti su questo manuale