CISCO SSH配置模版

SSH Server Configuration:

Router(config)# hostname ssn  

ssn(config)# ip domain-name ssn.com  

ssn(config)# crypto key generate rsa  

The name for the keys will be: ssn.ssn.com  

Choose the size of the key modulus in the range of 360 to 2048 for your  

  General Purpose Keys. Choosing a key modulus greater than 512 may take  

  a few minutes.  

How many bits in the modulus [512]: 1024  

% Generating 1024 bit RSA keys ...[OK]  

00:02:25: %SSH-5-ENABLED: SSH 1.5 has been enabled  

ssn(config)# username sense1 secret bigXdogYlover  

ssn(config)# username sense2 secret BIGxDOGyLOVER  

ssn(config)# access-list 1 permit 172.16.3.10  

ssn(config)# access-list 1 permit 172.16.3.11  

ssn(config)# line vty 0 4  

ssn(config-line)# login local  

ssn(config-line)# access-class 1 in  

ssn(config-line)# transport input ssh  

ssn(config-line)# transport output ssh  

ssn(config-line)# end

 

Verifying Your SSH Configuration:  

ssn# show ip ssh  

SSH Enabled - version 1.5  

Authentication timeout: 120 secs; Authentication retries: 3

Viewing Your SSH Client Connections:  

ssn# show ssh  

Connection      Version Encryption      State                   Username  

 0              1.5     3DES            Session started         richard

 

SSH client syntax:

Router# ssh [-l username] [-c {des | 3des}] [-o numberofpasswdprompts #]  

  [-p port_#] {IP_Address | hostname} [command]

SSH Client Connection Example:  

ssn# ssh -l sense1 192.168.1.254  

Password: cisco  

ssn>