Cisco router SSH logon Advanced Configuration

Cisco router SSH Login Advanced Configuration enablewww.2cto. comconfigureterminalenablesecretciscoservicepassword-encryption enable password encryption service aaanew-modelaaaauthenticationloginAAA_LOCALlocalusernamesunchaosecretcicsousernamecocoesec

Cisco router SSH logon Advanced Configuration enable www.2cto.com configure terminal enable secret cisco service password-encryption enable password encryption service aaa new-model aaa authentication login AAA_LOCAL local username sunchao secret cicso username cocoe sec

CiscoVroSSHLoginAdvancedConfiguration

Enable www.2cto.com

Configure terminal

Enable secret cisco

Service password-encryption enable the password encryption service

Aaa new-model

Aaa authentication login AAA_LOCAL local

Username sunchao secret cicso

Username cocoe secret cisco

Security passwords min-length 5ConfigurationMinimum Password Length

Hostname R1

Ip domain-name sunchao.com

Crypto key generate rsa

Access-list 10 remark Hosts allowed to SSH

Access-list 10 permit host 192.168.1.1

Access-list 10 permit host 192.168.1.2

Www.2cto.com

R2 (config) # line vty 0 4

R2 (config-line) # logging synchronous

R2 (config-line) # exec-timeout 5 30

R2 (config-line) # login authentication AAA_LOCAL

R2 (config-line) # transport input ssh

R2 (config-line) # access-class 10 in

R2 (config-line) # end

Ip ssh version 2

Ip ssh timeout 30 (set the maximum idle timer)

Ip ssh authentication-retries 2 (maximum number of failed attempts)

R1Login

R1 # ssh-l sunchao 192.168.1.1

Open

Password: