{"id":1048,"date":"2012-12-10T15:05:44","date_gmt":"2012-12-10T20:05:44","guid":{"rendered":"http:\/\/it.thelibrarie.com\/weblog\/?p=1048"},"modified":"2012-12-10T15:05:44","modified_gmt":"2012-12-10T20:05:44","slug":"enable-ssh-cisco-ios","status":"publish","type":"post","link":"https:\/\/it.thelibrarie.com\/weblog\/2012\/12\/enable-ssh-cisco-ios\/","title":{"rendered":"Enable SSH Cisco IOS"},"content":{"rendered":"

So I wanted to disable telnet and enable SSH only on the switches – take my 2950 and 3560 switches and change the following:
\nChange the hostname and generate the crypto keys<\/strong>
\nconf t<\/code>
\nhostname HOSTNAMEHERE<\/code>
\nip domain-name HOSTDOMAINHERE<\/code>
\ncrypto key generate rsa<\/code>
\nIf this command does not work then you need to update to a K9 or crytographic IOS!
\nend<\/code>
\nshow ip ssh<\/code>
\nwr mem<\/code><\/p>\n

Enable the AAA authentication<\/strong>
\nconf t<\/code>
\nservice password-encryption<\/code>
\naaa new-model<\/code>
\naaa authentication login default local<\/code>
\naaa authorization exec default local<\/code>
\naaa authorization network default local<\/code>
\nexit<\/code><\/p>\n

Create the User<\/strong>
\nconf t<\/code>
\nusername CISCO password PASSWORD<\/code>
\nend<\/code><\/p>\n

Create passwords<\/strong>
\nconf t<\/code>
\nenable secret PASSWORD<\/code>
\nline con 0<\/code>
\npassword PASSWORD<\/code>
\nline vty 0 4<\/code>
\nno password<\/code>
\ntransport input ssh<\/code>
\nline vty 5 15<\/code>
\nno password<\/code>
\ntransport input ssh<\/code>
\nexit<\/code><\/p>\n

Set SSH arguments<\/strong>
\nconf t<\/code>
\nip ssh version 2<\/code>
\nip ssh time-out 60<\/code>
\nip ssh authentication-retries 2<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

So I wanted to disable telnet and enable SSH only on the switches – take my 2950 and 3560 switches and change the following: Change the hostname and generate the crypto keys conf t hostname HOSTNAMEHERE ip domain-name HOSTDOMAINHERE crypto key generate rsa If this command does not work then you need to update to … Continue reading Enable SSH Cisco IOS<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1048","post","type-post","status-publish","format-standard","hentry","category-networking"],"_links":{"self":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/1048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/comments?post=1048"}],"version-history":[{"count":1,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/1048\/revisions"}],"predecessor-version":[{"id":1049,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/1048\/revisions\/1049"}],"wp:attachment":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/media?parent=1048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/categories?post=1048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/tags?post=1048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}