Cisco NCS 5000 Series Manual page 173

Secure Shell Commands
Command Default
3DES cipher
Command Modes
XR EXEC mode
Command History
Release
Release 6.0
Usage Guidelines
Use the ssh command to make an outbound client connection. The SSH client tries to make an SSHv2
connection to the remote peer. If the remote peer supports only the SSHv1 server, it internally spawns an
SSHv1 connection to the remote server. The process of the remote peer version detection and spawning the
appropriate client connection is transparent to the user.
If a VRF is specified in the ssh command, the ssh interface takes precedence over the interface specified in
the ssh client source-interface, on page 168
When you configure the cipher aes keyword, an SSH client makes a proposal, including one or more of the
key sizes you specified, as part of its request to the SSH server. The SSH server chooses the best possible
cipher, based both on which ciphers that server supports and on the client proposal.
Note AES encryption algorithm is not supported on the SSHv1 server and client. Any requests for an AES
cipher sent by an SSHv2 client to an SSHv1 server are ignored, with the server using 3DES instead.
A VRF is required to run SSH, although this may be either the default VRF or a VRF specified by the user.
If no VRF is specified while configuring the
on page 166
Use the command keyword to enable the SSHv2 server to parse and execute the ssh command in non-interactive
mode instead of initiating an interactive session.
Task ID
Task ID
crypto
basic-services
Examples The following sample output is from the ssh command to enable an outbound SSH client connection:
RP/0/RP0/CPU0:router# ssh vrf green
Password:
Remote-host>
commands, the default VRF is assumed.
System Security Command Reference for Cisco NCS 5000 Series Routers
command.
ssh client source-interface, on page 168
Operations
execute
execute
username userabc
ssh
Modification
This command was introduced.
or ssh client knownhost,
165