Ssh Server Configuration Pages; Ssh User Authentication - Cisco SF500-24 Administration Manual

Security: SSH Server

SSH Server Configuration Pages

SSH Server Configuration Pages
STEP 1
STEP 2
Cisco 500 Series Stackable Managed Switch Administration Guide Release 1.3
This section describes the pages used to configure the SSH Server feature.

SSH User Authentication

Use the SSH User Authentication page to enable SSH user authentication by
public key and/or password, and (when using authentication by public key) to add
an SSH client user that will be used to create an SSH session in an external SSH
application (like PuTTY).
Before you can add a user, you must generate an RSA or DSA key for the user in
the external SSH key generation/client application (such as PuTTY).
Automatic Login
If you use the SSH User Authentication page to create an SSH username for a user
who is already configured in the local user database. You can prevent additional
authentication by configuring the Automatic Login feature, which works as
follows:
• Enabled—If a user is defined in the local database, and this user passed
SSH Authentication using a public-key, the authentication by the local
database username and password is skipped.
The configured authentication method for this specific management
NOTE
method (console, Telnet, SSH and so on) must be Local (i.e. not RADIUS or
TACACS+). See
more details).
• Not Enabled—After successful authentication by SSH public key, even if
the username is configured in the local user database, the user is
authenticated again, as per the configured authentication methods,
configured on the Management Access Authentication page.
This page is optional. You do not have to work with user authentication in SSH.
To enable authentication and add a user.
Click Security > SSH Server > SSH User Authentication.
Select the following fields:
Configuring Management Access Authentication
22
for
436