Cisco Catalyst 8540 MSR Configuration Manual page 122

Configuring Secure Shell
When you use the
Note
force the secondary route processor to take over as the primary route processor the SSH RSA key pair is
automatically generated on the new primary route processor. This ensures that the SSH server is enabled
on the switch router even after route processor switchover and allows you to start configuring the new
primary route processor using a new SSH connection without reloading the switch router.
Figure 4-1
Figure 4-1
Solaris SSH client
172.18.124.114
Catalyst 8540
IOS SSH server
10.13.1.99
10.13.1.102
To configure SSH on the ATM switch router, perform the following steps in global EXEC mode:
Command
Step 1
Switch(config)# hostname name
Step 2 Switch(config)# ip domain-name name
Step 3 Switch(config)# crypto key {{generate rsa
[usage-keys] [modulus modulus-value]}
| {pubkey-chain rsa | zeroize rsa}}
Step 4 Switch(config)# ip ssh version {version-number} Configures the SSH server version.
Example
The following example shows how to configure the SSH client and start the SSH server:
Cat8540(config)# hostname Cat8540
Cat8540(config)# ip domain-name cisco.com
Cat8540(config)# crypto key generate rsa
The following example shows how to configure SSH server version 2:
ATM Switch Router Software Configuration Guide
4-20
redundancy force-failover main-cpu (Catalyst 8540 MSR)
is an example of a SSH network using a Catalyst 8540 MSR as the SSH server.
Secure Shell Example Network
WinPC SSH client
172.18.124.99
Router 1
Router 3
Chapter 4
Router 2
10.13.1.98
Purpose
Sets the host name.
Configures the switch router IP domain name.
Generates an RSA key pair.
Configuring System Management Functions
command to manually
OL-7396-01