Configuring Ssh - Cisco CRS-1 - Carrier Routing System Router Configuration Manual

How to Implement Secure Shell
The preferred method of authentication would be as stated in the SSH RFC. The RSA based
Note
authentication support is only for local authentication, and not for TACACS/RADIUS servers.
Authentication, Authorization, and Accounting (AAA) is a suite of network security services that
provide the primary framework through which access control can be set up on your Cisco router or access
server. For more information on AAA, see the Authentication, Authorization, and Accounting
Commands on Cisco IOS XR Software module in the Cisco IOS XR System Security Command Reference
publication and the Configuring AAA Services on Cisco IOS XR Software module in the Cisco IOS XR
System Security Configuration Guide publication.
How to Implement Secure Shell
To configure SSH, perform the tasks described in the following sections:
•
•

Configuring SSH

Perform this task to configure SSH.
For SSHv1 configuration, Step 1 to Step 4 are required. For SSHv2 configuration, Step
Note
optional.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-204
Configuring SSH, page SC-204
Configuring the SSH Client, page SC-207
configure
hostname hostname
domain name domain-name
exit
crypto key generate rsa [usage keys | general-keys] [keypair-label]
crypto key generate dsa
configure
ssh timeout seconds
ssh server [vrf vrf-name] (optional)
or
ssh server v2 (optional)
end
or
commit
show ssh
show ssh session details
Implementing Secure Shell on Cisco IOS XR Software
(required)
(required)
2. to Step 4. are
OL-20382-01