FTOS Configuration Guide for the C-Series - Force10 Networks

Secure Shell
Secure Shell (SSH) is disabled by default. Enable it using the command ip ssh server enable.
SSH supports three methods of authentication:
• Password Authentication on page 163
• RSA Authentication on page 163
• Host-based Authentication on page 164
Important Points to Remember
• If more than one method is enabled, the order in which the methods are preferred is based on the
ssh_config file on the Unix machine.
• When all the three authentication methods are enabled, password authentication is the backup method
when the RSA method fails.
• The files known_hosts and known_hosts2 are generated when a user tries to SSH using version 1 or
version 2, respectively.
Password Authentication
Authenticate an SSH client by prompting for a password when attempting to connect to the Force10
system. This is the simplest methods of authentication and uses SSH version 1.
Enable SSH password authentication using the command ip ssh password-authentication enable from
CONFIGURATION mode. View your SSH configuration using the command show ip ssh from EXEC
Privilege mode.
Figure 78 Enabling SSH Password Authentication
Force10(conf)#ip ssh server enable
% Please wait while SSH Daemon initializes ... done.
Force10(conf)#ip ssh password-authentication enable
Force10#sh ip ssh
SSH server : enabled.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA Authentication : disabled.
Vty Encryption Remote IP
RSA Authentication
Authenticate an SSH client based on an RSA key using RSA authentication. This method uses SSH
version 2.
FTOS Configuration Guide, version 7.7.1.0 163