Cisco ASR1006 - ASR 1006 Modular Expansion Base User Manual

Console Port, Telnet, and SSH Handling
Configuring Persistent SSH
10
Cisco ASR 1000 Series Aggregation Services Routers Software Configuration Guide
Examples
In the following example, a transport map that will make all SSH connections wait for the vty line to
become active before connecting to the router is configured and applied to the Management Ethernet
interface (interface gigabitethernet 0). The RSA keypair is named sshkeys.
This example only uses the commands required to configure persistent SSH.
Router(config)# transport-map type persistent ssh sshhandler
Router(config-tmap)# connection wait allow
Router(config-tmap)# rsa keypair-name sshkeys
Router(config-tmap)# transport interface gigabitethernet 0
In the following example, a transport map is configured that will apply the following settings to any users
attempting to access the Management Ethernet port via SSH:
• Users using SSH will wait for the vty line to become active, but will enter diagnostic mode if the
attempt to access IOS through the vty line is interrupted.
• The RSA keypair name is sshkeys
• The connection allows one authentication retry.
• The banner “--Welcome to Diagnostic Mode--” will appear if diagnostic mode is entered as a
result of SSH handling through this transport map.
• The banner “--Waiting for vty line--” will appear if the connection is waiting for the vty line
to become active.
The transport map is then applied to the interface when the transport
type persistent ssh input
command is entered to enable persistent SSH:
Router(config)# transport-map type persistent ssh sshhandler
Router(config-tmap)# connection wait allow interruptible
Step 8
time-out timeout-interval
Example:
Router(config-tmap)# time-out 30
(Optional) Specifies the SSH time-out interval in seconds.
The default timeout-inter
val is 120 seconds.
Step 9
transport interface gigabitethernet 0
Example:
Router(config-tmap)# transport interface
gigabitethernet 0
Applies the transport map settings to the Management
Ethernet interface (interface gigabitethernet 0).
Persistent SSH can only be ap
plied to the Management
Ethernet interface on the Cisco ASR 1000 Series Routers.
Step 10
exit
Example:
Router(config-tmap)# exit
Exits transport map configuration mode to re-enter global
configuration mode.
Step 11
transport type persistent ssh input
transport-map-name
Example:
Router(config)# transport type persistent ssh
input sshhandler
Applies the settings defined in the transport map to the
Management Ethernet interface.
The tr
ansport-map-name for this command must match the
transport-map-name defined in the transport-map type
persistent ssh command.
Command or Action Purpose

Cisco ASR1006 - ASR 1006 Modular Expansion Base Specifications

General

Brand	Cisco
Model	ASR1006 - ASR 1006 Modular Expansion Base
Category	Network Router
Language	English