About Ssh; Generating The Ssh Server Key-Pair; Specifying The Ssh Key - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 32 Configuring Users and Common Roles
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

About SSH

SSH provides secure communications to the Cisco NX-OS CLI. You can use SSH keys for the following
SSH options:
•
•

Generating the SSH Server Key-Pair

Be sure to have an SSH server key-pair with the appropriate version before enabling the SSH service.
Generate the SSH server key-pair according to the SSH client version used. The number of bits specified
for each key-pair ranges from 768 to 2048.
The SSH service accepts two types of key-pairs for use by SSH version 2.
•
•
Caution
To generate the SSH server key-pair, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# ssh key dsa 1024
generating dsa key.....
generated dsa key
switch(config)# ssh key rsa 1024
generating rsa key.....
generated rsa key
switch(config)# no ssh key rsa 1024
cleared RSA keys

Specifying the SSH Key

You can specify an SSH key to log in using the SSH client without being prompted for a password. You
can specify the SSH key in three different formats:
•
•
•
OL-18084-01, Cisco MDS NX-OS Release 4.x
SSH2, using RSA
SSH2 using DSA
The dsa option generates the DSA key-pair for the SSH version 2 protocol.
The rsa option generates the RSA key-pair for the SSH version 2 protocol.
If you delete all of the SSH keys, you cannot start a new SSH session.
Open SSH format
IETF SECSH format
Public Key Certificate in PEM format
Purpose
Enters configuration mode.
Generates the DSA server key-pair.
Generates the RSA server key-pair.
Clears the RSA server key-pair configuration.
Cisco MDS 9000 Family CLI Configuration Guide
Configuring SSH Services
32-15