Specifying The Ssh Public Keys For User Accounts - Cisco N5010P-N2K-BE Software Configuration Manual

Configuring SSH
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m

Specifying the SSH Public Keys for User Accounts

You can configure an SSH public key to log in using the SSH client without being prompted for a
password. You can specify the SSH public key in one of three different formats:
•
•
•
Specifying the SSH Public Keys in Open SSH Format
You can specify the SSH public keys in SSH format for user accounts.
To specify the SSH public keys in open SSH format, generate an SSH public key in open SSH format
and perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# username username sshkey
ssh-key
Step 3
switch(config)# exit
Step 4
switch# show user-account
Step 5
switch# copy running-config startup-config
The following example shows how to specify an SSH public keys in open SSH format:
switch# configure terminal
switch(config)# username User1 sshkey ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAy19oF6QaZl9G+3f1XswK3OiW4H7YyUyuA50rv7gsEPjhOBYmsi6PAVKui1nIf/
DQhum+lJNqJP/eLowb7ubO+lVKRXFY/G+lJNIQW3g9igG30c6k6+XVn+NjnI1B7ihvpVh7dLddMOXwOnXHYshXmSiH
3UD/vKyziEh5S4Tplx8=
switch(config)# exit
switch# show user-account
switch# copy running-config startup-config
Specifying the SSH Public Keys in IETF SECSH Format
You can specify the SSH public keys in IETF SECSH format for user accounts.
To specify the SSH public keys in IETF SECSH format, generate an SSH public key in IETF SCHSH
format, and perform this task:
Command
Step 1
switch# copy server-file bootflash:filename
Step 2
switch# configure terminal
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
19-4
Open SSH format
IETF SECSH format
Public Key Certificate in PEM format
Chapter 19 Configuring SSH and Telnet
Purpose
Enters configuration mode.
Configures the SSH public key in SSH format.
Exits global configuration mode.
(Optional) Displays the user account
configuration.
(Optional) Copies the running configuration to
the startup configuration.
Purpose
Downloads the file containing the SSH key in
IETF SECSH format from a server. The server
can be FTP, SCP, SFTP, or TFTP.
Enters configuration mode.
OL-16597-01