Cisco ASR 5000 Series Administration Guide

Step 3
Configure the system to allow SSH access:
[local]host_name(config-ctx)# ssh generate key [ type { v1-rsa | v2-rsa | v2-dsa } ]
v2-rsa is the recommended key type.
In StarOS 19.2 and higher, the v1-rsa keyword has been removed from and the v2-dsa keyword has been concealed
within the Context Configuration mode ssh generate CLI command. A keyword that was supported in a previous release
may be concealed in subsequent releases. StarOS continues to parse concealed keywords in existing scripts and
configuration files created in a previous release. But the concealed keyword no longer appears in the command syntax
for use in new scripts or configuration files. Entering a question mark (?) will not display a concealed keyword as part
of the Help text. A removed keyword generates an error message when parsed.
[local]host_name(config-ctx)# ssh generate key type v2-rsa
Step 4
Configure the system to support SFTP:
[local]host_name(config-ctx)# server sshd
[local]host_name(config-sshd)# subsystem sftp
[local]host_name(config-sshd)# exit
For additional information about SSH, see Configuring SSH Options, on page 29
Step 5
Configure the system to allow FTP access, if desired, by entering the following command:
[local]host_name(config-ctx)# server ftpd
For maximum system security, you should not enable FTP. In release 20.0 and higher Trusted StarOS builds, FTP is not
supported
Step 6
Exit the configuration mode by entering the following command:
[local]host_name(config-ctx)# end
[local]host_name#
Step 7
Verify the configuration by entering the following command:
[local]host_name# show configuration
The CLI output should be similar to the sample output:
context local
interface interface_name
ip address ipaddress subnetmask
exit
subscriber default
exit
administrator admin_name password admin_password
no server telnetd
no server ftpd
ssh generate key
server sshd
subsystem sftp
exit
port ethernet 5/1
bind interface interface_name local
exit
port ethernet 5/1
no shutdown
exit
snmp engine-id local 800007e580ed826c191ded2d3d
end
ASR 5500 System Administration Guide, StarOS Release 21.4
28
Getting Started
Configuring the System for Remote Access

Cisco ASR 5000 Series Specifications

General

Brand	Cisco
Model	ASR 5000 Series
Category	Network Router
Language	English