Dell N3200-ON Networking N-Series Switches CLI Reference Guide version 6.8.0 - Page 1233

SSH Commands Dell Networking N1108EP-ON/N1500/N2200-ON/N3200-ON Series Switches Management access to the switch is supported via telnet, SSH, or the serial console. The Dell Networking supports secure shell (SSH) and secure sockets layer (SSL) to help ensure the security of network transactions. Keys and certificates can be generated externally (that is, offline) and downloaded to the target or generated directly by the Dell Networking switch. crypto key generate dsa Use the crypto key generate dsa command in Global Configuration mode to generate DSA key pairs for the SSH server. A key pair is one public DSA key and one private DSA key. Use the crypto key zeroize command to remove the generated private key from the local file system. The public and private keys will be overwritten if the command is subsequently executed. Syntax crypto key generate dsa Default Configuration DSA key pairs do not exist. By default, 1024-bit DSA keys are generated. DSA keys must be exactly 1024 bits as specified by FIPS 186-2; therefore key length cannot be specified. Command Mode Global Configuration mode User Guidelines DSA keys are generated in pairs: one public DSA key and one private DSA key. These keys are used the encrypt communication with the switch when using SSH or HTTPS. If your switch already has DSA keys when you issue this command, you are warned and prompted to replace the existing keys. Existing certificates generated from the previous keys will be invalidated.The keys are not saved in the switch configuration; they are saved in the file system and Security Commands 1233