nx.os.and.cisco.nexus.switching.2nd.edition.1587143046

Note
• Be sure to have an SSH Server key-pair with the appropriate version before enabling
the SSH service. You can generate the SSH server key-pair according to the SSH
Client version used. The SSH service accepts two types of key-pairs for use by SSH
version 2:
• The dsa option generates the DSA key-pair for the SSH version 2 protocol.
• The rsa option generates the RSA key-pair for the SSH version 2 protocol.
• SSH supports the following public key formats:
• OpenSSH
• IETF Secure Shell (SECSH)
Ensure that you are in the correct VDC (or use the switchto vdc command).
To enable the SSH modular process, enter the following commands:
Click here to view code image
Congo# conf t
Enter configuration commands, one per line. End with
CNTL/Z.
Congo(config)# feature ssh
Example 5-19 shows how to generate SSH Server keys. The default SSH Server key is an
RSA key generated using 2048 per the code in Example 5-19 bits.
Example 5-19. Generating a 2048-Bit SSH RSA Server Key
Click here to view code image
Congo# conf t
Enter configuration commands, one per line. End with
CNTL/Z.
Congo(config)# ssh key rsa 2048
rsa keys already present, use force option to overwrite
them
Congo(config)# ssh key rsa 2048 force
deleting old rsa key.....
generating rsa key(2048 bits).....
generated rsa key
Congo(config)# feature ssh
Congo(config)# exit
Example 5-20 shows how to verify the SSH Server keys that were generated on the NX-OS