Users Guide

Security Commands 1108
The crypto key zeroize dsa command removes the following files:
ssh_host_dsa_key
ssh_host_dsa_key.pub
Removing the keys does not terminate existing SSH sessions.
Example
console(config)#crypto key zeroize rsa
ip ssh port
Use the ip ssh port command in Global Configuration mode to specify the
TCP port to be used by the SSH server. To use the default port, use the no
form of this command.
Syntax
ip ssh port port-number
no ip ssh port
• port-number — Port number for use by the SSH server. (Range: 1025–
65535)
Default Configuration
The default value is 22.
Command Mode
Global Configuration mode
User Guidelines
The SSH TCP port should not be set to a value that might conflict with other
well-known protocol port numbers used on this switch. The following non-
exhaustive list of ports are reserved to the system and may not be able to be
configured for another purpose: 23 (telnet), 80 (HTTP), 161,162 (SNMP),
514, (SYSLOG), 546,547 (DHCPv6), 2222 (SSH).