Access Security Guide K/KA/KB.15.15

• The private key should be passphrase protected for highest security; the user is prompted to
enter the passphrase.
• The private key can be configured by copying it to the SSH client switch, using the copy
command.
• If the public-key authentication fails or the client has not been configured with a key pair, the
"password" method of authentication is used and the user is prompted for a password.
• Successful TACACS or RADIUS logins will give the user either operator or manager privileges.
This is important if there are chained SSH sessions.
Messages related to SSH operation
MeaningMessage
File transfer did not occur. Indicates an error in
communicating with the tftp server or not finding the file to
download. Causes include such factors as:
00000K Peer unreachable.
• Incorrect IP configuration on the switch
• Incorrect IP address in the command
• Case (upper/lower) error in the filename used in the
command
• Incorrect configuration on the TFTP server
• The file is not in the expected location.
• Network misconfiguration
• No cable connection to the network
File transfer did not occur. Indicates the switch experienced
a problem when trying to copy tftp the requested file. The
00000K Transport error.
file may not be in the expected directory, the filename may
be misspelled in the command, or the file permissions may
be wrong.
The IP SSH port command has attempted to configure a
reserved TCP port. Use the default or select another port
number.
Cannot bind reserved TCP port <port-number>.
The client key does not exist in the switch. Use copy tftp to
download the key from a TFTP server.
Client public-key file corrupt or not found. Use 'copy tftp
pub-key-file <ip-addr><filename>' to download new file.
The public-key file you are trying to download has one of
the following problems:
Download failed: overlength key in key file.
Download failed: too many keys in key file.
• A key in the file is too long. The maximum key length
is 1024 characters, including spaces. This could also
Download failed: one or more keys is not a valid public
key.
mean that two or more keys are merged together instead
of being separated by a <CR><LF>.
• There are more than 10 public keys in the key file and
switch total. Delete some keys from the switch or file.
The switch does not detect duplicate keys.
• One or more keys in the file is corrupted or is not a
valid public key.
See “Creating a Client Public-Key text file” (page 247) for
information on client public-key properties.
The client key does not exist in the switch. Use copy tftp to
download the key from a TFTP server.
Error: Requested keyfile does not exist.
After you execute the generate ssh
[dsa] [rsa]
Generating new RSA host key. If the cache is depleted,
this could take up to two minutes.
Configuring 245