Starting an Encrypted Session with a Remote Device Note The device with which you want to connect must support a Secure Shell (SSH) server that has an encryption algorithm that is supported in Cisco software. Also, you need not enable your device. SSH can be run in disabled mode. Procedure Secure Shell Version 2 Support Starting an Encrypted Session with a Remote Device Command or Action Purpose Step 11 end Example: host1(conf-ssh-pubkey-server)# end Exits public-key server configuration mode and returns to privileged EXEC mode. Step 12 configure terminal Example: host1# configure terminal Enters global configuration mode. Step 13 ip ssh stricthostkeycheck Example:
host1(config)# ip ssh stricthostkeycheck Ensures that server authentication takes place. • The connection is terminated in case of a failure. • Use no hostname command to return to the default host. Step 14 end Example: host1(config)# end Exits global configuration mode and returns to privileged EXEC mode. Command or Action Purpose Step 1 enable Example: Device> enable Enables privileged EXEC mode. Enter your password, if prompted.
Step 2 ssh [-v {1 | 2} | -c {aes128-ctr | aes192-ctr | aes256-ctr | aes128-cbc | 3des | aes192-cbc | aes256-cbc} | -l user-id | -l user-id:vrf-name number ip-address ip-address | -l user-id:rotary number ip-address | -m {hmac-md5-128 | hmac-md5-96 | hmac-sha1-160 | hmac-sha1-96} | -o numberofpasswordprompts n | -p port-num] {ip-addr | hostname} [command | -vrf] Starts an encrypted session with a remote networking device. Secure Shell Version 2 Support 11