Cisco Nexus 5000 Series Switch CLI Software Configuration Guide, NX-OS 4.0(1a)N1 (OL-16597-01, January 2009)

Send feedback to [e-mail]
19-4
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 19 Configuring SSH and Telnet
Configuring SSH
Specifying the SSH Public Keys for User Accounts
You can configure an SSH public key to log in using the SSH client without being prompted for a
password. You can specify the SSH public key in one of three different formats:
• Open SSH format
• IETF SECSH format
• Public Key Certificate in PEM format
Specifying the SSH Public Keys in Open SSH Format
You can specify the SSH public keys in SSH format for user accounts.
To specify the SSH public keys in open SSH format, generate an SSH public key in open SSH format
and perform this task:
The following example shows how to specify an SSH public keys in open SSH format:
switch# configure terminal
switch(config)# username User1 sshkey ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAy19oF6QaZl9G+3f1XswK3OiW4H7YyUyuA50rv7gsEPjhOBYmsi6PAVKui1nIf/
DQhum+lJNqJP/eLowb7ubO+lVKRXFY/G+lJNIQW3g9igG30c6k6+XVn+NjnI1B7ihvpVh7dLddMOXwOnXHYshXmSiH
3UD/vKyziEh5S4Tplx8=
switch(config)# exit
switch# show user-account
switch# copy running-config startup-config
Specifying the SSH Public Keys in IETF SECSH Format
You can specify the SSH public keys in IETF SECSH format for user accounts.
To specify the SSH public keys in IETF SECSH format, generate an SSH public key in IETF SCHSH
format, and perform this task:
Command Purpose
Step 1
switch# configure terminal
Enters configuration mode.
Step 2
switch(config)# username username sshkey
ssh-key
Configures the SSH public key in SSH format.
Step 3
switch(config)# exit
Exits global configuration mode.
Step 4
switch# show user-account
(Optional) Displays the user account
configuration.
Step 5
switch# copy running-config startup-config
(Optional) Copies the running configuration to
the startup configuration.
Command Purpose
Step 1
switch# copy server-file bootflash:filename
Downloads the file containing the SSH key in
IETF SECSH format from a server. The server
can be FTP, SCP, SFTP, or TFTP.
Step 2
switch# configure terminal
Enters configuration mode.