Cisco ASR1000-RP2 Software Guide - Page 282
Examples, Step 8
View all Cisco ASR1000-RP2 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 282 highlights
Configuring Persistent SSH Chapter 8 Console Port, Telnet, and SSH Handling Step 8 Step 9 Step 10 Step 11 Command or Action time-out timeout-interval Example: Router(config-tmap)# time-out 30 transport interface gigabitethernet 0 Example: Router(config-tmap)# transport interface gigabitethernet 0 exit Example: Router(config-tmap)# exit transport type persistent ssh input transport-map-name Example: Router(config)# transport type persistent ssh input sshhandler Purpose (Optional) Specifies the SSH time-out interval in seconds. The default timeout-interval is 120 seconds. Applies the transport map settings to the Management Ethernet interface (interface gigabitethernet 0). Persistent SSH can only be applied to the Management Ethernet interface on the Cisco ASR 1000 Series Routers. Exits transport map configuration mode to re-enter global configuration mode. Applies the settings defined in the transport map to the Management Ethernet interface. The transport-map-name for this command must match the transport-map-name defined in the transport-map type persistent ssh command. Examples In the following example, a transport map that will make all SSH connections wait for the vty line to become active before connecting to the router is configured and applied to the Management Ethernet interface (interface gigabitethernet 0). The RSA keypair is named sshkeys. This example only uses the commands required to configure persistent SSH. Router(config)# transport-map type persistent ssh sshhandler Router(config-tmap)# connection wait allow Router(config-tmap)# rsa keypair-name sshkeys Router(config-tmap)# transport interface gigabitethernet 0 In the following example, a transport map is configured that will apply the following settings to any users attempting to access the Management Ethernet port via SSH: • Users using SSH will wait for the vty line to become active, but will enter diagnostic mode if the attempt to access IOS through the vty line is interrupted. • The RSA keypair name is sshkeys • The connection allows one authentication retry. • The banner "--Welcome to Diagnostic Mode--" will appear if diagnostic mode is entered as a result of SSH handling through this transport map. • The banner "--Waiting for vty line--" will appear if the connection is waiting for the vty line to become active. The transport map is then applied to the interface when the transport type persistent ssh input command is entered to enable persistent SSH: Router(config)# transport-map type persistent ssh sshhandler Router(config-tmap)# connection wait allow interruptible 8-10 Cisco ASR 1000 Series Aggregation Services Routers Software Configuration Guide OL-16506-10