Send documentation comments to mdsfeedback-doc@cisco.com
39-16
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 39 Configuring Users and Common Roles
SSH Services
• Generating the SSH Server Key Pair, page 39-17
• Overwriting a Generated Key Pair, page 39-18
• Enabling SSH or Telnet Service, page 39-18
• SSH Authentication Using Digital Certificates, page 39-19
About SSH
SSH provides secure communications to the Cisco NX-OS CLI. You can use SSH keys for the following
SSH options:
• SSH1
• SSH2, using RSA
• SSH2 using DSA
About the SSH Server Key Pair
Be sure to have an SSH server key pair with the appropriate version before enabling the SSH service.
Generate the SSH server key pair according to the SSH client version used. The number of bits specified
for each key pair ranges from 768 to 2048.
The SSH service accepts three types of key pairs for use by SSH versions 1 and 2.
• The rsa1 option generates the RSA1 key pair for the SSH version 1 protocol.
• The dsa option generates the DSA key pair for the SSH version 2 protocol.
• The rsa option generates the RSA key pair for the SSH version 2 protocol.
Caution If you delete all of the SSH keys, you cannot start a new SSH session.