U
SER
A
UTHENTICATION
3-89
• SSH Server-Key Size – Specifies the SSH server key size.
(Range: 512-896 bits; Default: 768)
- The server key is a private key that is never shared outside the switch.
- The host key is shared with the SSH client, and is fixed at 1024 bits.
Web – Click Security, SSH, Settings. Enable SSH and adjust the
authentication parameters as required, then click Apply. Note that you
must first generate the host key pair on the SSH Host-Key Settings page
before you can enable the SSH server.
Figure 3-38 SSH Server Settings
CLI – This example enables SSH, sets the authentication parameters, and
displays the current configuration. It shows that the administrator has
made a connection via SHH, and then disables this connection.
Console(config)#ip ssh server 4-48
Console(config)#ip ssh timeout 100 4-49
Console(config)#ip ssh authentication-retries 5 4-50
Console(config)#ip ssh server-key size 512 4-51
Console(config)#end
Console#show ip ssh 4-54
SSH Enabled - version 2.0
Negotiation timeout: 120 secs; Authentication retries: 3
Server key size: 768 bits
Console#show ssh 4-55
Information of secure shell
Session Username Version Encrypt method Negotiation state
------- -------- ------- -------------- -----------------
0 admin 2.0 cipher-3des session-started
Console#disconnect 0 4-24
Console#