Configuring Secure Shell on Cisco IOS Routers

钱塘在线

Hardware and Software Versions
The information in this document is based on the software version below.

Cio IOS 3600 Software (C3640-IK9S-M), Version 12.2(2)T1

SSH was introduced into IOS platforms/images as shown below.

SSH Version 1.0 (SSHv1) server was introduced in some IOS platforms/images starting in 12.0.5.S.
SSH clnt was introduced in some IOS platforms/images starting in 12.1.3.T.
SSH terminal-line access (also known as rrse-telnet) was introduced in some IOS platforms/images starting in 12.2.2.T.
[[The No.1 Picture.]]
Testing Authentication Without SSH:
!--- aaa new-model causes the local username/password on the router
!--- to be used in the absence of other aaa statements.
aaa new-model
username cisco password 0 cio
line vty 0 4
!--- Instead of aaa new-model, the login local command may be used.ip domain-name rtp.cio.com
!--- Generate an SSH key to be used with SSH.

Testing Authentication With SSH:
cry key generate rsa
ip ssh time-out 60
ip ssh authentication-retrs 2

ip domain-name rtp.cio.com
!--- Generate an SSH key to be used with SSH.
cry key generate rsa
ip ssh time-out 60
ip ssh authentication-retrs 2

line vty 0 4
!--- Prnt non-SSH telnets.
transport input ssh
ssh
!--- Step 1: Configure hostname if you have not previously done so.
1