Crypto Key Generate Hostkey - Allied Telesis x510-28GTX Command Reference Manual

S S (SSH) C
ECURE HELL OMMANDS

CRYPTO KEY GENERATE HOSTKEY

crypto key generate hostkey
Overview This command generates public and private keys for the SSH server.
When you enable the SSH server, the server automatically generates an SSHv2 host
key pair (public and private keys), using RSA with 1024-bit key generation.
If you need a key with different parameters than this, you can use this command to
generate that key before you enable the SSH server. If a host key exists with the
same cryptography algorithm, this command replaces the old host key with the
new key.
This command is not saved in the device configuration. However, the device saves
the keys generated by this command in the non-volatile memory.
crypto key generate hostkey {dsa} [<768-1024>]
Syntax
crypto key generate hostkey {rsa|rsa1} [<768-32768>]
crypto key generate hostkey {ecdsa} [<256|384>]
Default The default key length for RSA and DSA is 1024 bits.
The default key size for ECDSA is 256 bits.
Mode Global Configuration
Examples To generate an RSA host key for SSH version 2 connections that is 2048 bits in
length, use the commands:
awplus#
awplus(config)#
To generate a DSA host key, use the commands:
awplus#
awplus(config)#
C613-50170-01 Rev B
Parameters Description
dsa
Creates a DSA hostkey. Both SSH version 1 and 2 connections can
use the DSA hostkey.
rsa
Creates an RSA hostkey for SSH version 2 connections.
rsa1
Creates an RSA hostkey for SSH version 1 connections.
ecdsa
Creates an ECDSA hostkey. Both SSH version 1 and 2 connections
can use the ECDSA hostkey.
<768-32768>
The length in bits of the generated key. The default is 1024 bits.
<256|384>
The ECDSA key size in bits. The default is 256, but it can be set to
384.
configure terminal
crypto key generate hostkey rsa 2048
configure terminal
crypto key generate dsa
Command Reference for x510 Series
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
2695