Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 205

Implementing Secure Shell on Cisco IOS XR
Software
Secure Shell (SSH) is an application and a protocol that provides a secure replacement to the Berkeley
r-tools. The protocol secures sessions using standard cryptographic mechanisms, and the application can
be used similarly to the Berkeley rexec and rsh tools.
Two versions of the SSH server are available: SSH Version 1 (SSHv1) and SSH Version 2 (SSHv2).
SSHv1 uses Rivest, Shamir, and Adelman (RSA) keys and SSHv2 uses Digital Signature Algorithm
(DSA) keys. Cisco IOS XR software supports both SSHv1 and SSHv2.
This module describes how to implement Secure Shell on the Cisco IOS XR Software.
For a complete description of the Secure Shell commands used in this chapter, see the Secure Shell
Note
Commands module of the Cisco IOS XR System Security Command Reference publication. To locate
documentation of other commands that appear in this chapter, use the command reference master index,
or search online.
Feature History for Implementing Secure Shell on Cisco CRS-1
Release
Release 2.0
Release 3.0
Release 3.2
Release 3.3.0
Release 3.4.0
Release 3.5.0
Release 3.6.0
Release 3.7.0
Release 3.8.0
Release 3.9.0
OL-20382-01
Modification
This feature was introduced on the Cisco CRS-1.
No modification.
No modification.
The ssh server v2 command was added.
No modification.
No modification.
No modification.
No modification.
Support for Advanced Encryption Standard (AES) algorithm was
•
added.
• The SSH server and client were made VRF-aware.
Support was added for the following enhancements:
RSA based authentication on the SSH server
•
SFTP client in interactive mode
•
SFTP server implementation
•
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-199