Cisco IOS XR User Manual

SC-149
Cisco IOS XR System Security Configuration Guide
Implementing Secure Shell on Cisco IOS XR
Software
Secure Shell (SSH) is an application and a protocol that provides a secure replacement to the Berkeley
r-tools. The protocol secures sessions using standard cryptographic mechanisms, and the application can
be used similarly to the Berkeley rexec and rsh tools.
Two versions of SSH are available: SSH Version 1 (SSHv1) and SSH Version 2 (SSHv2). SSHv1 uses
Rivest, Shamir, and Adelman (RSA) keys and SSHv2 uses Digital Signature Algorithm (DSA) keys.
Cisco IOS XR software supports both SSHv1 and SSHv2.
This module describes the tasks that you need to implement Secure Shell on your Cisco IOS XR
network.
Note For a complete description of the Secure Shell commands used in this chapter, see the Secure Shell
Commands on Cisco IOS XR Software module of the Cisco IOS XR System Security Command Reference
publication. To locate documentation of other commands that appear in this chapter, use the command
reference master index, or search online.
Feature History for Implementing Secure Shell on Cisco Cisco IOS XR Software
Contents
• Prerequisites to Implementing Secure Shell, page SC-150
• Restrictions for Implementing Secure Shell, page SC-150
• Information About Implementing Secure Shell, page SC-151
• How to Implement Secure Shell, page SC-152
Release Modification
Release 2.0 This feature was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 Support was added for the Cisco XR 12000 Series Router.
Release 3.3.0 The ssh server v2 command was added.
Release 3.4.0 No modification.
Release 3.5.0 No modification.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.