Configuring a Device for SSH Version 2 Using RSA Key Pairs Procedure Secure Shell Version 2 Support Configuring a Device for SSH Version 2 Using RSA Key Pairs Command or Action Purpose Step 1 enable Example: Device> enable Enables privileged EXEC mode. Enter your password, if prompted. Step 2 configure terminal Example: Device# configure terminal Enters global configuration mode. Step 3 ip ssh rsa keypair-name keypair-name Example: Device(config)# ip ssh rsa keypair-name sshkeys Specifies the RSA key pair to be used for SSH. Note A Cisco device can have many RSA key pairs. Step 4 crypto key generate rsa usage-keys label key-label modulus modulus-size Example:
Device(config)# crypto key generate rsa usage-keys label sshkeys modulus 768 Enables the SSH server for local and remote authentication on the device. • For SSH Version 2, the modulus size must be at least 768 bits. Note To delete the RSA key pair, use the crypto key zeroize rsa command. When you delete the RSA key pair, you automatically disable the SSH server. Step 5 ip ssh [time-out seconds | authentication-retries integer] Example: Device(config)# ip ssh time-out 12 Configures SSH control variables on your device. Step 6 ip ssh version 2 Example: Device(config)# ip ssh version 2 Specifies the version of SSH to be run on the device. Step 7 exit Example:
Device(config)# exit Exits global configuration mode and enters privileged EXEC mode. Secure Shell Version 2 Support 7