Users Guide

-B [Source Interface]
Source Interface of the connection
-c [Encryption Cipher]
Encryption cipher to use
-l [Username] User name option
-m [HMAC Algorithm] HMAC algorithm to use
-p [Port Number] SSH server port option (default 22)
Hostname IP address or hostname of a remote system
S4000-6216#
Supported
Releases
10.5.2.1 or Later
show crypto ssh-key
Displays the current host public keys used in SSH authentication.
Syntax
show crypto ssh-key {rsa | ecdsa | ed25119}
Parameters
● rsa — Displays the RSA public key.
● ecdsa — Displays the ECDSA public key.
● ed25519 — Displays the Ed25519 key.
Default Not configured
Command Mode EXEC
Usage
Information
After you regenerate an SSH server key with a customized bit size, disable and re-enable the SSH server to
use the new public keys. To verify the changes, use the show crypto command.
If a remote SSH client uses strict host-key checking, copy a newly generated host key to the list of known
hosts on the client device.
Example
OS10# show crypto ssh-key rsa
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCogJtArA0fHJkFpioGaAcp+vrDQFC3l3XFHtd
41wXY9kM0Ar+37yRsDul8vKodqSDiGLRuPjFTcVjvDdSKWblJRsybkmA6nuHJIyPOScDepLlicM
IOxDhXEE92VRAmGuLI2AoeVYcH+IneWXhwQOkOFLtpxfnsiQY65CfS4aGoHOHWSfX3wI7boEDRD
uvZ8gzRxTuM16Qr+RxBLJ7/OzkjNIN1/8Ok+8aJtCoJKbcYaduMjmhVNrNUW5TUXoCnp1XNRpkJ
zgS7Lt47yi86rqrTCAQW4eSYJIJs4+4ql9b4MF2D3499Ofn8uS82Mjtj0Nl01lbTbP3gsF4YYdB
WaFqp root@OS10
Supported
Releases
10.4.1.0 or later
username sshkey
Enables SSH password-less login using the public key of a remote client. The remote client is not prompted to enter a password.
Syntax
username username sshkey sshkey-string
Parameters
● username — Enter the user name. This value is the user name configured with the username
password role command.
● sshkey-string — Enter the public key of remote client device, as the text string. If sshkey-
string contains a blank space, enclose the string in double quotes (").
Default
The default SSH public keys are an RSA key generated using 2048 bits, an ECDSA key with 256 bits, and an
Ed2559 key with 256 bits.
Command Mode CONFIGURATION
Usage
Information
To configure multiple public keys for SSH password-less login of a specific user, use the username
username sshkey filename command. The no form of the command removes the public key
configuration of a specified user.
Security 1373