Users Guide

Authentication, Authorization, and Accounting 299
Substitute the login ID of the switch administrator for the User admin
parameter above, and set the correct path to your account for the
IdentityFile parameter.
3 On the switch, generate the ephemeral encryption keys to enable the SSH
server to run, create the admin user, and configure the SSH server and the
authentication key as shown below, making the appropriate substitutions
for the login ID:
console(config)#crypto key generate rsa
Do you want to overwrite the existing RSA keys? (y/n):y
RSA key generation started, this may take a few minutes...
RSA key generation complete.
console(config)#crypto key generate dsa
Do you want to overwrite the existing DSA keys? (y/n):y
DSA key generation started, this may take a few minutes...
DSA key generation complete.
console(config)#username "admin" password
5f4dcc3b5aa765d61d8327deb882cf99
privilege 15 encrypted
console(config)#ip ssh server
console(config)#ip ssh pubkey-auth
console(config)#ip ssh protocol 2
console(config)#line ssh
console(config-ssh)#login authentication networkList
console(config-ssh)#exit
console(config)#crypto key pubkey-chain ssh user-key admin rsa
console(config-pubkey-key)#Key-String "ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAvChaxFl4sMoWMZAAwtx/pcVb1jY6moer3C
T231M47dgZDPFJ
1qf7/fuDwmES72FmIJAqq8cTUfT55BrI0r3vk05QJu0nnhcNjW6c98mNL9wxfx
7TWybySs3zJJpS
NhcZ9JM+OJ104n4oS4izIzY7NSSNa+LQgq5j0mw9jdITY8SicImenLCjluILrp
i6YA9WtC9RHGpi
xLzIRFQ/Kmf5SWcXiSRft4gUJP7Xp69SF3VAAuoUFQove5RMr6paLXUiZfwzDk
HA8F4WHaDyHCtx
ESLXnZuQQjCiowll8Q2Nq5YXnu/ZEUJTyof1Uc8S13aP2rr+6NdzbN6khBmSSg
QnVw==
jsmith@xl-rtp-02"
console(config-pubkey-key)#exit
The Key-String above is the contents of the ~/.ssh/id_rsa.pub file enclosed
in quotes. This file was generated by the ssh-keygen command as shown
above.