Overwriting A Generated Key Pair; Clearing Ssh Hosts - Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual

Chapter 26 Configuring Users and Common Roles
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
To generate the SSH server key pair, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# ssh key rsa1 1024
generating rsa1 key.....
generated rsa1 key
switch(config)# ssh key dsa 1024
generating dsa key.....
generated dsa key
switch(config)# ssh key rsa 1024
generating rsa key.....
generated rsa key
switch(config)# no ssh key rsa 1024
cleared RSA keys

Overwriting a Generated Key Pair

If the SSH key pair option is already generated for the required version, you can force the switch to
overwrite the previously generated key pair.
To overwrite the previously generated key pair, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# ssh key dsa 768
ssh key dsa 512
dsa keys already present, use force
option to overwrite them
switch(config)# ssh key dsa 512 force
deleting old dsa key.....
generating dsa key.....
generated dsa key

Clearing SSH Hosts

The clear ssh hosts command clears the existing list of trusted SSH hosts and reallows you to use
SCP/SFTP along with copy command for particular hosts.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Purpose
Enters configuration mode.
Generates the RSA1 server key pair.
Generates the DSA server key pair.
Generates the RSA server key pair.
Clears the RSA server key pair configuration.
Purpose
Enters configuration mode.
Tries to set the server key pair. If a required server key
pair is already configured, use the force option to
overwrite that server key pair.
Deletes the old DSA key and sets the server key pair
using the new bit specification.
Cisco MDS 9000 Family Configuration Guide
Configuring SSH Services
26-15