cisco IOS XE — Prerequisites for Secure Shell Version 2 Support

Secure Shell Version 2 Support The Secure Shell Version 2 Support feature allows you to configure Secure Shell (SSH) Version 2. (SSH Version 1 support was implemented in an earlier Cisco software release.) SSH runs on top of a reliable transport layer and provides strong authentication and encryption capabilities. The only reliable transport that is defined for SSH is TCP. SSH provides a means to securely access and securely execute commands on another computer over a network. The Secure Copy Protocol (SCP) feature that is provided with SSH allows for the secure transfer of files.

Prerequisites for Secure Shell Version 2 Support, on page 1 Restrictions for Secure Shell Version 2 Support, on page 2 Information About Secure Shell Version 2 Support, on page 2 How to Configure Secure Shell Version 2 Support, on page 6 Configuration Examples for Secure Shell Version 2 Support, on page 17 Additional References for Secure Shell Version 2 Support, on page 21 Feature History for Secure Shell Version 2 Support, on page 22 Prerequisites for Secure Shell Version 2 Support • Before configuring SSH, ensure that the required image is loaded on your device. The SSH server requires you to have a k9 (Triple Data Encryption Standard [3DES]) software image depending on your release.

• You have to use a SSH remote device that supports SSH Version 2 and connect to a Cisco device. • SCP relies on authentication, authorization, and accounting (AAA) to function correctly. Therefore, AAA must be configured on the device to enable the secure copy protocol on the SSH Server. Note The SSH Version 2 server and the SSH Version 2 client are supported on your Cisco software, depending on your release. (The SSH client runs both the SSH Version 1 protocol and the SSH Version 2 protocol. The SSH client is supported in k9 images depending on your release.) Secure Shell Version 2 Support 1