Specifying The Ssh Public Keys In Ietf Secsh Format; Specifying The Ssh Public Keys In Pem-Formatted Public Key Certificate Form - Cisco Nexus 3600 NX-OS Security Configuration Manual

Configuring SSH and Telnet
CfTPO5B8LRkedn56BEy2N9ZcdpqE6aqJLZwfZcTFEzaAAZp9AS86dgBAjsKGs7UxnhGySr8ZELv+DQBsDQH6rZt0KR+2Da8hJD4Z
XIeccWk0gS1DQUNZ300xstQsYZUtqnx1bvm5Ninn0McNinn0Mc=
switch(config)# exit
switch# show user-account
switch# copy running-config startup-config
The username command in the example above is a single line that has been broken for legibility.
Note

Specifying the SSH Public Keys in IETF SECSH Format

You can specify the SSH public keys in IETF SECSH format for user accounts.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
The following example shows how to specify the SSH public key in the IETF SECSH format:
switch#copy tftp://10.10.1.1/secsh_file.pub bootflash:secsh_file.pub
switch# configure terminal
switch(config)# username User1 sshkey file bootflash:secsh_file.pub
switch(config)# exit
switch# show user-account
switch# copy running-config startup-config

Specifying the SSH Public Keys in PEM-Formatted Public Key Certificate Form

You can specify the SSH public keys in PEM-formatted Public Key Certificate form for user accounts.
Command or Action
switch# copy server-file bootflash:
filename
switch# configure terminal
switch(config)# username username
sshkey file filename
switch(config)# exit
switch# show user-account
switch# copy running-config
startup-config
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
Specifying the SSH Public Keys for User Accounts
Purpose
Downloads the file that contains the SSH key in
IETF SECSH format from a server. The server can
be FTP, SCP, SFTP, or TFTP.
Enters global configuration move.
Configures the SSH public key in SSH format.
Exits global configuration mode.
(Optional)
Displays the user account configuration.
(Optional)
Copies the running configuration to the startup
configuration.
63