ssh
To start the Secure Shell (SSH) client connection and enable an outbound connection to an SSH server, use
the ssh command.
ssh [vrf vrf-name] {ipv4-address| ipv6-address| hostname} [username user-id] [cipher aes {128-cbc|
192-cbc| 256-cbc}][source-interface type interface-path-id][commandcommand-name]
Syntax Description
Specifies the name of the VRF associated with this connection.
vrfvrf-name
IPv4 address in A:B:C:D format.
ipv4-address
IPv6 address in X:X::X format.
ipv6-address
Hostname of the remote node. If the hostname has both IPv4 and IPv6 addresses,
the IPv6 address is used.
hostname
(Optional) Specifies the username to use when logging in on the remote
networking device running the SSH server. If no user ID is specified, the default
is the current user ID.
usernameuser-id
(Optional) Specifies Advanced Encryption Standard (AES) as the cipher for the
SSH client connection.
If there is no specification of a particular cipher by the administrator,
the client proposes 3DES as the default to ensure compatibility.
Note
cipheraes
128-bit keys in CBC mode.128-CBC
192-bit keys in CBC mode.192-CBC
256-bit keys in CBC mode.256-CBC
(Optional) Specifies the source IP address of a selected interface for all outgoing
SSH connections.
source interface
Interface type. For more information, use the question mark (?)online help
function.
type
Physical interface or virtual interface.
Use theshowinterfaces command in EXEC mode to see a list of all
interfaces currently configured on the router.
Note
For more information about the syntax for the router, use the question
mark(?)online help function.
interface-path-id
(Optional) Specifies a remote command. Adding this keyword prompts the
SSHv2 server to parse and execute thesshcommand in non-interactive mode
instead of initiating the interactive session.
command
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
OL-24740-01 269
Secure Shell Commands
ssh