CLI Reference Guide-R04

Chapter 8 | User Authentication Commands
Secure Shell
– 269 –
Command Mode
Global Configuration
Command Usage
◆ The SSH server supports up to eight client sessions. The maximum number of
client sessions includes both current Telnet sessions and SSH sessions.
◆ The SSH server uses RSA for key exchange when the client first establishes a
connection with the switch, and then negotiates with the client to select either
DES (56-bit) or 3DES (168-bit) for data encryption.
◆ You must generate RSA host keys before enabling the SSH server.
Example
Console#ip ssh crypto host-key generate
Console#configure
Console(config)#ip ssh server
Console(config)#
Related Commands
ip ssh crypto host-key generate (271)
show ssh (273)
ip ssh server-key size This command sets the SSH server key size. Use the no form to restore the default
setting.
Syntax
ip ssh server-key size key-size
no ip ssh server-key size
key-size – The size of server key. (Range: 512-896 bits)
Default Setting
768 bits
Command Mode
Global Configuration
Command Usage
The server key is a private key that is never shared outside the switch.
The host key is shared with the SSH client, and is fixed at 1024 bits.
Example
Console(config)#ip ssh server-key size 512
Console(config)#