Generating Ssh Keys; Setting Ssh Key Pair - Cisco ASR 5500 Installation Manual

Initial System Configuration

Generating SSH Keys

The ssh generate command generates a public/private key pair which is to be used by the SSH server. The
v1-rsa keyword has been removed from and the v2-dsa keyword concealed within the ssh generate CLI
command. The only keyword available for generating SSH keys is v2-rsa.
Important
Step 1 Enter the context configuration mode:
host_name
[local]
[local]host_name(config-ctx)#
Step 2 Generate an SSH key pair.
host_name
[local]
host_name
[local]

Setting SSH Key Pair

The ssh key command sets the public/private key pair to be used by the system. The v2-dsa keyword is
concealed in the ssh key command.
Specify the SSH key pair parameters.
[local]host_name(config-ctx)#
Notes:
• data is the encrypted key expressed as an alphanumeric string of 1 through 1023 characters
• length octets is the length of the encrypted key in octets expressed as an integer from 0 through 65535
• type specifies the key type; v2-rsa is the only supported type.
For releases prior to 20.0, StarOS supports a maximum of 64 configurable authorized SSH keys. For
Important
release 20.0 and higher, StarOS supports a maximum of 200 configurable authorized SSH keys.
The generated key pair remains in use until the command is issued again.
context context_name
(config)#
ssh generate key type v2-rsa
(config-ctx)#
(config-ctx)#
ssh key data length octets type v2-rsa
Generating SSH Keys
ASR 5500 Installation Guide
107