Consolidated Platform Configuration Guide, Cisco Ios Release 15.2(4)E (Catalyst 2960-X Switches - Cisco Catalyst 2960 series Configuration Manual

How to Configure Secure Shell
SUMMARY STEPS
1. enable
2. configure terminal
3. aaa new-model
4. aaa authentication login {default | list-name} method1 [ method2... ]
5. aaa authorization {network | exec | commands level | reverse-access | configuration} {default |
list-name} [method1 [ method2... ]]
6. username name [privilege level] password encryption-type encrypted-password
7. ip scp server enable
8. exit
9. show running-config
10. debug ip scp
DETAILED STEPS
Command or Action
Step 1 enable
Example:
Device> enable
Step 2
configure terminal
Example:
Device# configure terminal
Step 3 aaa new-model
Example:
Device(config)# aaa new-model
Step 4
aaa authentication login {default | list-name} method1
[ method2... ]
Example:
Device(config)# aaa authentication login default
group tacacs+
Step 5 aaa authorization {network | exec | commands level |
reverse-access | configuration} {default | list-name}
[method1 [ method2... ]]

Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)

1084
Purpose
Enables privileged EXEC mode.
• Enter your password if prompted.
Enters global configuration mode.
Sets AAA authentication at login.
Enables the AAA access control system.
Sets parameters that restrict user access to a network.
Note The exec keyword runs authorization to
determine if the user is allowed to run an EXEC
shell; therefore, you must use the exec keyword
when you configure SCP.