Implementing Secure Shell on Cisco IOS XR Software
How to Implement Secure Shell
SC-204
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Note The preferred method of authentication would be as stated in the SSH RFC. The RSA based
authentication support is only for local authentication, and not for TACACS/RADIUS servers.
Authentication, Authorization, and Accounting (AAA) is a suite of network security services that
provide the primary framework through which access control can be set up on your Cisco router or access
server. For more information on AAA, see the Authentication, Authorization, and Accounting
Commands on Cisco
IOS XR Software module in the Cisco IOS XR System Security Command Reference
publication and the Configuring AAA Services on Cisco
IOS XR Software module in the Cisco IOS XR
System Security Configuration Guide publication.
How to Implement Secure Shell
To configure SSH, perform the tasks described in the following sections:
• Configuring SSH, page SC-204 (required)
• Configuring the SSH Client, page SC-207 (required)
Configuring SSH
Perform this task to configure SSH.
Note For SSHv1 configuration, Step 1 to Step 4 are required. For SSHv2 configuration, Step 2. to Step 4. are
optional.
SUMMARY STEPS
1. configure
2. hostname hostname
3. domain name domain-name
4. exit
5. crypto key generate rsa [usage keys | general-keys] [keypair-label]
6. crypto key generate dsa
7. configure
8. ssh timeout seconds
9. ssh server [vrf vrf-name] (optional)
or
ssh server v2 (optional)
10. end
or
commit
11. show ssh
12. show ssh session details