Example: Scp Server-Side Configuration Using Network-Based Authentication - Cisco Catalyst 2960 series Configuration Manual

Configuration Examples for Secure Shell
aaa authorization exec default local
username user1 privilege 15 password 0 lab
! SSH must be configured and functioning properly.
ip scp server enable

Example: SCP Server-Side Configuration Using Network-Based Authentication

The following example shows how to configure the server-side functionality of SCP using a network-based
authentication mechanism:
! AAA authentication and authorization must be configured properly for SCP to work.
aaa new-model
aaa authentication login default group tacacs+
aaa authorization exec default group tacacs+
! SSH must be configured and functioning properly.
ip ssh time-out 120
ip ssh authentication-retries 3
ip scp server enable
Example Reverse SSH Console Access
The following configuration example shows that reverse SSH has been configured for console access for
terminal lines 1 through 3:
Terminal Server Configuration
line 1 3
no exec
login authentication default
transport input ssh
Client Configuration
The following commands configured on the SSH client will form the reverse SSH session with lines 1, 2, and
3, respectively:
ssh -l lab:1 router.example.com
ssh -l lab:2 router.example.com
ssh -l lab:3 router.example.com
Example Reverse SSH Modem Access
The following configuration example shows that dial-out lines 1 through 200 have been grouped under rotary
group 1 for modem access:
line 1 200
no exec
login authentication default
rotary 1
transport input ssh
exit
The following command shows that reverse SSH will connect to the first free line in the rotary group:
ssh -l lab:rotary1 router.example.com
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1086