Users Guide

show ip ssh
Displays the SSH server information.
Syntax
show ip ssh
Parameters None
Default Not configured
Command Mode EXEC
Usage
Information
Use this command to view information about the established SSH sessions.
Example
OS10# show ip ssh
SSH Server: Enabled
--------------------------------------------------
SSH Server Ciphers: [e-mail],aes128-ctr,
aes192-ctr,aes256-ctr,
[e-mail],aes256-
[e-mail]
SSH Server MACs: [e-mail],umac-128-
[e-mail],
[e-mail],
[e-mail],
hmac-sha1-
[e-mail],[e-mail],
[e-mail],hmac-sha2-256,
hmac-sha2-512,hmac-sha1
SSH Server KEX algorithms: [e-mail],ecdh-sha2-
nistp256,
ecdh-sha2-nistp384,ecdh-sha2-nistp521,
diffie-hellman-group-exchange-sha256,
diffie-hellman-group14-sha1
Password Authentication: Enabled
Host-Based Authentication: Disabled
RSA Authentication: Enabled
Challenge Response Auth: Disabled
Supported
Releases
10.3.0E or later
show crypto ssh-key
Displays the current host public keys used in SSH authentication.
Syntax
show crypto ssh-key {rsa | ecdsa | ed25119}
Parameters
● rsa — Displays the RSA public key.
● ecdsa — Displays the ECDSA public key.
● ed25519 — Displays the Ed25519 key.
Default Not configured
Command Mode EXEC
Usage
Information
After you regenerate an SSH server key with a customized bit size, disable and re-enable the SSH server to
use the new public keys. To verify the changes, use the show crypto command.
If a remote SSH client uses strict host-key checking, copy a newly generated host key to the list of known
hosts on the client device.
Example
OS10# show crypto ssh-key rsa
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCogJtArA0fHJkFpioGaAcp+vrDQFC3l3XFHtd
41wXY9kM0Ar+37yRsDul8vKodqSDiGLRuPjFTcVjvDdSKWblJRsybkmA6nuHJIyPOScDepLlicM
IOxDhXEE92VRAmGuLI2AoeVYcH+IneWXhwQOkOFLtpxfnsiQY65CfS4aGoHOHWSfX3wI7boEDRD
Security 1157