The user checks network security and requires SSH logon to the core device. Previously, the device used Telnet logon, and the user name and password are transmitted in plaintext, which does not meet the security check requirements.
In fact, the SSH login configuration is very simple, mainly divided into the following steps:
1. Configure the Domain Name
Sd_core_r7600 (config) # IP domain-name sdcore
2. generate an SSH key
Sd_core_r7600 (config) # crypto key generate RSA
The name for the keys will be: sd_core_r7600.sdcore
Choose the size of the key modulus in the range of 360 to 2048 for your
General purpose keys. Choosing a key modulus greater than 512 may take
A few minutes.
How many bits in the modulus [512]: 1024
% Generating 1024 bit RSA Keys, keys will be non-exportable... [OK]
Note: The key size is defined based on actual conditions.
3. Enable AAA New-Model
Sd_core_r7600 (config) # AAA New-Model
4. Configure the username and password for SSH logon.
Sd_core_r7600 (config) # username Cisco secret [email protected]
5. Apply SSH logon on line
Sd_core_r7600 (config) # Line vty 0 4
Sd_core_r7600 (config-line) # Transport input SSH
Sd_core_r7600 (config-line) # exit
Sd_core_r7600 (config) # exit
6. other optional configuration parameters
Sd_core_r7600 (config) # Set the SSH version for ip ssh connector ons 2
Sd_core_r7600 (config) # Set the SSH timeout value for ip ssh time-out 120
Sd_core_r7600 (config) # ip ssh Authentication-retries 3
Note: If you need further configuration, refer to the official Cisco documentation.
Configure SSH logon on a Cisco Router