Users Guide

Parameters
● username — Enter an OS10 user name who logs in on a remote client. This value is the user name
configured using the username password role command.
● filepath — Enter the absolute path name of the local file containing the public keys used by
remote devices to log in to the OS10 switch.
Default
The default SSH public keys are an RSA key generated using 2048 bits, an ECDSA key with 256 bits, and
an Ed2559 key with 256 bits.
Command Mode CONFIGURATION
Usage
Information
Before you use the command, locate the public keys on a remote client in the ~/.ssh/id_rsa.pub file.
Create a text file and copy the SSH public keys on the remote client into the file. Enter each public key on
a separate line. Download the file to your home OS10 directory.
NOTE: Entering the command when an SSH key file is not present has no effect and results in a
silent failure. SSH password-less login is not enabled.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.1.0. Also
supported in SmartFabric mode starting in release 10.5.0.1.
The no version of the command removes the SSH password-less configuration for the specified user
name.
Example
OS10(config)# username user10 sshkey filename /test_file.txt
OS10(config)# do show running-configuration users
username admin password $6$q9QBeYjZ
$jfxzVqGhkxX3smxJSH9DDz7/3OJc6m5wjF8nnLD
7/VKx8SloIhp4NoGZs0I/UNwh8WVuxwfd9q4pWIgNs5BKH. role sysadmin
username user10 password $6$rounds=656000$G10VRFTJB291ekwo
$iTGf0zd4bTUcBBpI
Vsbr6oStnUZMydN5lDs4WE6G3XHEtWbcKrGTeAo1wEF0cenEgRRPzi3SMmYyzAHCCC8wS0
role
sysadmin
username user10 sshkey filename /test_file.txt
Supported
Releases
10.4.1.0 or later
crypto ssh-key generate
Regenerates the public keys used in SSH authentication.
Syntax
crypto ssh-key generate {rsa bits | ecdsa bits | ed25519}
Parameters
● rsa bits — Regenerates the RSA key with the specified bit size: 2048, 3072, or 4096; default
2048.
● ecdsa bits — Regenerates the ECDSA key with the specified bit size: 256, 384, or 521; default
256.
● ed25519 — Regenerates the Ed25519 key with the default bit size.
Default The SSH server uses default public key lengths for client authentication:
● RSA key: 2048 bits
● ECDSA key : 256 bits
● Ed25519 key: 256 bits
Command Mode EXEC
Usage
Information
If necessary, you can regenerate the public keys used by the SSH server with a customized bit size. You
cannot change the default size of the Ed25519 key. The crypto ssh-key generate command is
available only to the sysadmin and secadmin roles.
Security 1159