Cisco Catalyst 2960 Series

PurposeCommand or Action
Configures server certificate profile and user certificate profile and
enters SSH certificate profile configuration mode.
ip ssh server certificate profile
Example:
Switch(config)# ip ssh server certificate
profile
Step 5
Configures user certificate profile and enters SSH server certificate
profile user configuration mode.
user
Example:
Switch(ssh-server-cert-profile)# user
Step 6
Configures the public key infrastructure (PKI) trustpoint that is used
to verify the incoming user certificate.
trustpoint verify PKI-trustpoint-name
Example:
Switch(ssh-server-cert-profile-user)#
trustpoint verify trust2
Step 7
Configure multiple trustpoints by executing the same
command multiple times. A maximum of 10 trustpoints can
be configured.
Note
(Optional) Mandates the presence of the Online Certificate Status
Protocol (OCSP) response with the incoming user certificate.
ocsp-response required
Example:
Switch(ssh-server-cert-profile-user)#
ocsp-response required
Step 8
By default, the user certificate is accepted without an OCSP
response.
Note
Exits SSH server certificate profile user configuration mode and
returns to privileged EXEC mode.
end
Example:
Switch(ssh-server-cert-profile-user)# end
Step 9
Verifying the Server and User Authentication Using Digital Certificates
SUMMARY STEPS
1.
enable
2.
show ip ssh
DETAILED STEPS
Step 1
enable
Enables privileged EXEC mode.
•
Enter your password if prompted.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1122
Verifying the Server and User Authentication Using Digital Certificates