C613-50631-01 Rev A Command Reference for IE340 Series 3321
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
SECURE SHELL (SSH) COMMANDS
SHOW
CRYPTO KEY HOSTKEY
show crypto key hostkey
Overview This command displays the public keys generated on the device for the SSH server.
When you enable the SSH server, if no host keys exist, the server automatically
generates SSHv2 host key pairs using ECDSA with a curve length of 384, and RSA
with a 1024-bit key (unless in secure mode, when it only generates the ECDSA key).
The private key remains on the device secretly. The public key is copied to SSH
clients to identify the server. This command displays the public key.
Syntax
show crypto key hostkey [dsa|ecdsa|rsa|rsa1]
Mode User Exec, Privileged Exec and Global Configuration
Examples To show the public keys generated on the device for SSH server, use the command:
awplus# show crypto key hostkey
To display the RSA public key of the SSH server, use the command:
awplus# show crypto key hostkey rsa
Output Figure 66-1: Example output from the show crypto key hostkey command
Parameter Description
dsa Displays the DSA algorithm public key.
ecdsa Displays the ECDSA algorithm public key.
rsa Displays the RSA algorithm public key for SSH version 2 connections.
rsa1 Displays the RSA algorithm public key for SSH version 1 connections.
From AlliedWare Plus 5.5.1-1.1 onwards, SSH version 1 is not supported.
Type Bits Fingerprintď€
-------------------------------------------------------------ď€
rsa 1024 SHA256:T/sVz5OoA1HHXcov9dXzGGQg8avRUYh1psxNSUcSOvsď€
ecdsa 384 SHA256:qVn/KpN5X5ct5CJakxE4OmPWmPvW2vIbBjF4SA2bZkMď€
Table 1: Parameters in output of the show crypto key hostkey command
Parameter Description
Type Algorithm used to generate the key.
Bits Length in bits of the key.
Fingerprint Checksum value for the public key.