HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 283

Chapter 19 Configuring SSH and Telnet Guidelines and Limitations Send feedback to [email protected] Guidelines and Limitations SSH has the following configuration guidelines and limitations: • The Nexus 5000 Series switch supports only SSH version 2 (SSHv2). Configuring SSH This section includes the following sections: • Generating SSH Server Keys, page 19-3 • Specifying the SSH Public Keys for User Accounts, page 19-4 • Starting SSH Sessions to Remote Devices, page 19-6 • Clearing SSH Hosts, page 19-6 • Disabling the SSH Server, page 19-6 • Deleting SSH Server Keys, page 19-6 • Clearing SSH Sessions, page 19-7 Generating SSH Server Keys You can generate an SSH server key based on your security requirements. The default SSH server key is an RSA key generated using 1024 bits. To generate SSH server keys, perform this task: Step 1 Step 2 Step 3 Step 4 Step 5 Command Purpose switch# configure terminal Enters configuration mode. switch(config)# ssh key {dsa [force] | rsa [bits [force]]} Generates the SSH server key. The bits argument is the number of bits used to generate the key. The range is 768 to 2048 and the default value is 1024. Use the force keyword to replace an existing key. switch(config)# exit Exits global configuration mode. switch# show ssh key (Optional) Displays the SSH server keys. switch# copy running-config startup-config (Optional) Copies the running configuration to the startup configuration. The following example shows how to generate an SSH server key: switch# configure terminal switch(config)# ssh key rsa 2048 switch(config)# exit switch# show ssh key switch# copy running-config startup-config OL-16597-01 Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 19-3