C613-50631-01 Rev A Command Reference for IE340 Series 3310
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
SECURE SHELL (SSH) COMMANDS
CRYPTO
KEY GENERATE USERKEY
crypto key generate userkey
Overview This command generates public and private keys for an SSH user using an RSA,
ECDSA, or ED25519 cryptography algorithm. To use public key authentication,
copy the public key of the user onto the remote SSH server.
This command is not saved in the device configuration. However, the device saves
the keys generated by this command in the non-volatile memory.
Syntax
crypto key generate userkey <username> rsa [<1024-16384>]
crypto key generate userkey <username> ecdsa [<256|384|521>]
crypto key generate userkey <username> ed25519
Default The default key length for RSA is 2048 bits.
The default key size for ECDSA is 384 bits.
Mode Global Configuration
Examples To generate a 4096-bit RSA user key for SSH version 2 connections for the user
‘bob’, use the commands:
awplus# configure terminal
awplus(config)# crypto key generate userkey bob rsa 4096
To generate an ECDSA user key of key size 521 for the user ‘lapo’, use the
commands:
awplus# configure terminal
awplus(config)# crypto key generate userkey lapo ecdsa 521
To generate an Ed25519 user key of key size 256 for the user ‘lapo’, use the
commands:
awplus# configure terminal
awplus(config)# crypto key generate userkey lapo ed25519
Parameters Description
<username> Name of the user that the user key is generated for. The
username must begin with a letter. Valid characters are all
numbers, letters, and the underscore, hyphen and full stop
symbols.
rsa Creates an RSA userkey.
ecdsa Creates an ECDSA userkey.
ed25519 Creates an Ed25519 userkey with a keysize of 256.
<1024-16384> The length in bits of the generated key. The default is 2048 bits.
<256|384|521> The ECDSA key size in bits. The default is 384.