Ssh Server Configuration Example - Digitalchina Networks DCS-3950 series Manual

5.2.3.3.5 ssh-server host-key create rsa
Command：ssh-server host-key create rsa [modulus < modulus >]
Function: Generate new RSA host key
Parameter: modulus is the modulus which is used to compute the host key; valid range
is 768 to 2048. The default value is 1024.
Command mode: Global Mode
Default: The system uses the key generated when the ssh-server is started at the first
time.
Usage Guide: This command is used to create new security keys for the host. After the
key is created, SSH clients will have to use the key in order to communicate with the host.
If the configuration for the new key is preserved through the write command, the system
will use the key for host authentications. For encrypting and decrypting of the key is quite
time consuming, as well as some client does not support keys which are of modulus of
2048 bits, it is recommended to use the default modulus of 1024 bits for computation of
the keys for the efficiency and compatibilityreasons.
Example: Create a new key for the host.
Switch(Config)#ssh-server host-key create rsa
5.2.3.3.6 monitor
Command：monitor
no monitor
Function: Display SSH debug information on the SSH client side; at the same time
disable function of debug information in console,the 'no monitor' command stops
displaying SSH debug information on the SSH client side,enable function of debug
information in console
Command mode: Admin Mode
Usage Guide: By default, the debug information will be output to the Console port of the
switch but not the SSH login session if the debug information is enabled on the switch.
With this command, debug information can be redirected to the specified SSH login
session, but not the Console port or any other telnet or SSH login session.
Example: Enable debug information for the SSH client.
Switch#monitor
Relative Command: ssh-user

5.2.3.4 SSH Server Configuration Example

Scenario 1：
Requirement: Enable SSH server on the switch, and run SSH2.0 client software such
as secure shell client and putty on the terminal. Log on the switch by using the username
and password from the client.
Configure the IP address, add SSH user and enable SSH service on the switch.
SSH2.0 client can log on the switch by using the username and password to configure the
DCS-3950 series Ethernet switch manual
53