Asr 5500 System Administration Guide, Staros Release 21.4 - Cisco ASR 5000 Series Administration Manual

Configuring the System for Remote Access
Step 3
Configure the system to allow SSH access:
host_name
[local]
v2-rsa is the recommended key type.
In StarOS 19.2 and higher, the v1-rsa keyword has been removed from and the v2-dsa keyword has been concealed
within the Context Configuration mode ssh generate CLI command. A keyword that was supported in a previous release
may be concealed in subsequent releases. StarOS continues to parse concealed keywords in existing scripts and
configuration files created in a previous release. But the concealed keyword no longer appears in the command syntax
for use in new scripts or configuration files. Entering a question mark (?) will not display a concealed keyword as part
of the Help text. A removed keyword generates an error message when parsed.
[local]host_name(config-ctx)#
Step 4
Configure the system to support SFTP:
host_name
[local]
host_name
[local]
host_name
[local]
For additional information about SSH, see
Step 5 Configure the system to allow FTP access, if desired, by entering the following command:
host_name
[local]
For maximum system security, you should not enable FTP. In release 20.0 and higher Trusted StarOS builds, FTP is not
supported
Step 6 Exit the configuration mode by entering the following command:
host_name
[local]
host_name
[local]
Step 7 Verify the configuration by entering the following command:
host_name
[local]
The CLI output should be similar to the sample output:
context local
interface
ip address
exit
subscriber default
exit
administrator
no server telnetd
no server ftpd
ssh generate key
server sshd
subsystem sftp
exit
port ethernet 5/1
bind interface
exit
port ethernet 5/1
no shutdown
exit
snmp engine-id local 800007e580ed826c191ded2d3d
end

ASR 5500 System Administration Guide, StarOS Release 21.4

28
ssh generate key [ type { v1-rsa | v2-rsa | v2-dsa } ]
(config-ctx)#
ssh generate key type v2-rsa
server sshd
(config-ctx)#
subsystem sftp
(config-sshd)#
exit
(config-sshd)#
Configuring SSH Options, on page 29
server ftpd
(config-ctx)#
end
(config-ctx)#
#
show configuration
#
interface_name
ipaddress subnetmask
admin_name
password
interface_name
local
admin_password
Getting Started