Configuring The Switch For Secure Shell; Understanding Ssh - Cisco Catalyst 2960 Software Configuration Manual

Configuring the Switch for Secure Shell

To secure the switch for HTTP access by using AAA methods, you must configure the switch with the
Note
ip http authentication aaa global configuration command. Configuring AAA authentication does not
secure the switch for HTTP access by using AAA methods.
For more information about the ip http authentication command, see the Cisco IOS Security Command
Reference, Release 12.4.
Configuring the Switch for Secure Shell
This section describes how to configure the Secure Shell (SSH) feature. To use this feature, you must
install the cryptographic (encrypted) software image on your switch. You must obtain authorization to
use this feature and to download the cryptographic software files from Cisco.com. For more information,
see the release notes for this release.
•
•
•
For SSH configuration examples, see the "SSH Configuration Examples" section in the "Configuring
Secure Shell" chapter of the Cisco IOS Security Configuration Guide:
http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfssh.html
SSH functions the same in IPv6 as in IPv4. For IPv6, SSH supports IPv6 addresses and enables secure,
encrypted connections with remote IPv6 nodes over an IPv6 transport.
For complete syntax and usage information for the commands used in this section, see the command
Note
reference for this release and the command reference for Cisco IOS Release 12.2:
http://www.cisco.com/en/US/docs/ios/12_2/security/command/reference/fsecur_r.html
and the

Understanding SSH

SSH is a protocol that provides a secure, remote connection to a device. SSH provides more security for
remote connections than Telnet does by providing strong encryption when a device is authenticated. This
software release supports SSH Version 1 (SSHv1) and SSH Version 2 (SSHv2).
•
•
SSH Servers, Integrated Clients, and Supported Versions
The SSH feature has an SSH server and an SSH integrated client, which are applications that run on the
switch. You can use an SSH client to connect to a switch running the SSH server. The SSH server works
with the SSH client supported in this release and with non-Cisco SSH clients. The SSH client also works
with the SSH server supported in this release and with non-Cisco SSH servers.
The switch supports an SSHv1 or an SSHv2 server.
The switch supports an SSHv1 client.
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
9-42
Understanding SSH, page 9-42
Configuring SSH, page 9-43
Displaying the SSH Configuration and Status, page 9-46
Cisco IOS IPv6 Command
SSH Servers, Integrated Clients, and Supported Versions, page 9-42
Limitations, page 9-43
Chapter 9
Reference.
Configuring Switch-Based Authentication
OL-26520-01