Last login: Tue Dec 6 13:15:21 2005 from 10.76.248.213 user1@courier:~> exit logout [Connection to 10.76.248.200 closed by foreign host] Device1# debug ip ssh client SSH Client debugging is on Device1# ssh -l lab 10.1.1.3 Password: *Nov 17 12:50:53.199: SSH0: sent protocol version id SSH-1.99-Cisco-1.25 *Nov 17 12:50:53.199: SSH CLIENT0: protocol version id is - SSH-1.99-Cisco-1.25 *Nov 17 12:50:53.199: SSH CLIENT0: sent protocol version id SSH-1.99-Cisco-1.25 *Nov 17 12:50:53.199: SSH CLIENT0: protocol version exchange successful *Nov 17 12:50:53.203: SSH0: protocol version id is - SSH-1.99-Cisco-1.25 *Nov 17 12:50:53.335: SSH CLIENT0:
key exchange successful and encryption on *Nov 17 12:50:53.335: SSH2 CLIENT 0: using method keyboard-interactive Password: Password: Password: *Nov 17 12:51:01.887: SSH2 CLIENT 0: using method password authentication Password: Password: lab Device2> *Nov 17 12:51:11.407: SSH2 CLIENT 0: SSH2_MSG_USERAUTH_SUCCESS message received *Nov 17 12:51:11.407: SSH CLIENT0: user authenticated *Nov 17 12:51:11.407: SSH2 CLIENT 0: pty-req request sent *Nov 17 12:51:11.411: SSH2 CLIENT 0: shell request sent *Nov 17 12:51:11.411: SSH CLIENT0: session open Example:
Enabling ChPass with a Blank Password Change In the following example, the ChPass feature is enabled, and a blank password change is accomplished using the SSH Keyboard Interactive Authentication method. A TACACS+ access control server (ACS) is used as the back-end AAA server. Device> enable Device1# ssh -l cisco 10.1.1.3 Password: Old Password: cisco New Password: cisco123 Re-enter New password: cisco123 Device2> exit [Connection to 10.1.1.3 closed by foreign host] Example: Enabling ChPass and Changing the Password on First Login In the following example, the ChPass feature is enabled and TACACS+ ACS is used as the back-end server.
The password is changed on the first login using the SSH keyboard interactive authentication method. Device1> enable Device1# ssh -l cisco 10.1.1.3 Password: cisco Your password has expired. Enter a new one now. New Password: cisco123 Secure Shell Version 2 Support Example: Enabling ChPass with a Blank Password Change Secure Shell Version 2 Support 18