Users Guide

Authentication, Authorization, and Accounting 311
5 Enter the public key obtained from a key authority or from a tool such as
PuTTyGen. This command is entered as a single line, not as multiple lines
as it appears in the following text.
console(config-pubkey-key)#key-string row
AAAAB3NzaC1yc2EAAAABJQAAAIBor6DPjYDpSy8Qcji68xrS/4Lf8c9Jq4xXKI
Z5Pvv20AkRFE0ifVI9EH4jyZagR3wzH5Xl9dyjA6bTuqMgN15C1xJC1l59FU88
JaY7ywGdRppmoaJrNRPM7RZtQPaDVIunzm3eMr9PywwQ0umsHWGNexUrDYHFWR
IAmJp689AAxw==
console(config)#exit
6 Set the line method to SSH:
console(config)#line ssh
7 Configure the authentication method to the networkList. The networkList
contains a single method — local — which is equivalent to password
authentication. Since the authentication is provided by the public key, a
second layer of authentication is not required:
console(config-ssh)#login authentication networkList
console(config-ssh)#exit
8 The following three lines enable the SSH server, configure it to use public
key authentication, and specify use of the SSH-2 protocol.
console(config)#ip ssh server
console(config)#ip ssh pubkey-auth
console(config)#ip ssh protocol 2
The following command shows the configured authentication methods:
console (config)#show authentication methods
Login Authentication Method Lists
---------------------------------
defaultList : none
networkList : local
NOAUTH : line
Enable Authentication Method Lists
----------------------------------
enableList : enable none
enableNetList : enable
NOAUTH : line
Line Login Method List Enable Method List
------- ----------------- ------------------
Console defaultList enableList
Telnet networkList enableList