About Ssh; Generating The Ssh Server Key-Pair; Specifying The Ssh Key - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Chapter 39 Configuring Users and Common Roles
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

About SSH

SSH provides secure communications to the Cisco SAN-OS CLI. You can use SSH keys for the
following SSH options:
•
•
•

Generating the SSH Server Key-Pair

Be sure to have an SSH server key-pair with the appropriate version before enabling the SSH service.
Generate the SSH server key-pair according to the SSH client version used. The number of bits specified
for each key-pair ranges from 768 to 2048.
The SSH service accepts three types of key-pairs for use by SSH versions 1 and 2.
•
•
•
Caution
To generate the SSH server key-pair, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# ssh key rsa1 1024
generating rsa1 key.....
generated rsa1 key
switch(config)# ssh key dsa 1024
generating dsa key.....
generated dsa key
switch(config)# ssh key rsa 1024
generating rsa key.....
generated rsa key
switch(config)# no ssh key rsa 1024
cleared RSA keys

Specifying the SSH Key

You can specify an SSH key to log in using the SSH client without being prompted for a password. You
can specify the SSH key in three different formats:
•
•
•
OL-16184-01, Cisco MDS SAN-OS Release 3.x
SSH1
SSH2, using RSA
SSH2 using DSA
The rsa1 option generates the RSA1 key-pair for the SSH version 1 protocol.
The dsa option generates the DSA key-pair for the SSH version 2 protocol.
The rsa option generates the RSA key-pair for the SSH version 2 protocol.
If you delete all of the SSH keys, you cannot start a new SSH session.
Open SSH format
IETF SECSH format
Public Key Certificate in PEM format
Purpose
Enters configuration mode.
Generates the RSA1 server key-pair.
Generates the DSA server key-pair.
Generates the RSA server key-pair.
Clears the RSA server key-pair configuration.
Cisco MDS 9000 Family CLI Configuration Guide
Configuring SSH Services
39-15