Generating Ssh Host Key Pairs - Cisco ACE-4710-K9 Administration Manual

Chapter 2 Enabling Remote Access to the ACE
Configuring SSH Management Sessions
The syntax of this command is:
ssh maxsessions max_sessions
The max_sessions argument sets the maximum number of concurrent SSH
sessions allowed for the associated context. The range is from 1 to 16 SSH
sessions for the Admin context and from 1 to 4 SSH sessions for each user
context. The defaults are 16 (Admin context) and 4 (user context).
For example, to configure the maximum number of concurrent SSH sessions in
the Admin context to 3, enter:
host1/Admin(config)# ssh maxsessions 3
To revert to the default of 16 Telnet sessions for the Admin context, enter:
host1/Admin(config)# no ssh maxsessions

Generating SSH Host Key Pairs

The ACE supports remote login over an SSH session that uses private and public
key pairs to perform authentication for the context. DSA and RSA keys are
generated in pairs—one public key and one private key. With this method of
remote connection, use a generated private and public key pair to participate in a
secure communication by encrypting and decrypting messages.
The global administrator performs the key generation in the Admin context. All
contexts associated with the ACE share the common key. There is only a single
host-key pair.
If you are the administrator or another user authorized in the Admin context, use
Note
the changeto command in Exec mode to move to the Admin context. An
administrator can perform all allowable functions within the Admin context.
Ensure that you have an SSH host key pair with the appropriate version before
enabling the SSH service. The SSH service accepts three types of key pairs for
use by SSH versions 1 and 2. Generate the SSH host key pair according to the SSH
client version used. The number of bits specified for each key pair ranges from
768 to 4096.
To generate the SSH private key and the corresponding public key for use by the
SSH server, use the ssh key command in configuration mode.
Cisco 4700 Series Application Control Engine Appliance Administration Guide
2-17
OL-11157-01