Cisco IOS XR User Manual

Implementing Secure Shell on Cisco IOS XR Software
How to Implement Secure Shell
SC-153
Cisco IOS XR System Security Configuration Guide
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
hostname hostname
Example:
RP/0/RP0/CPU0:router(config)# hostname router1
Configures a hostname for your router.
Step 3
domain name domain-name
Example:
RP/0/RP0/CPU0:router(config)# domain name
cisco.com
Defines a default domain name that the software uses to
complete unqualified host names.
Step 4
exit
Example:
RP/0/RP0/CPU0:router(config)# exit
Exits global configuration mode, and returns the router to
EXEC mode.
Step 5
crypto key generate rsa [usage keys |
general-keys] [
keypair-label ]
Example:
RP/0/RP0/CPU0:router# crypto key generate rsa
general-keys
Generates an RSA key pair.
• To delete the RSA key pair, use the crypto key zeroize
rsa command.
This command is used for SSHv1 only.
Step 6
crypto key generate dsa
Example:
RP/0/RP0/CPU0:router# crypto key generate dsa
Enables the SSH server for local and remote authentication
on the router.
• The recommended minimum modulus size is 1024 bits.
• Generates a DSA key pair.
To delete the DSA key pair, use the crypto key zeroize
dsa command.
This command is used only for SSHv2.
Step 7
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 8
ssh timeout seconds
Example:
RP/0/RP0/CPU0:router(config)# ssh timeout 60
(Optional) Configures the timeout value for user
authentication to AAA.
• If the user fails to authenticate itself to AAA within the
configured time, the connection is aborted.
• If no value is configured, the default value of
30 seconds is used. The range is from 5 to 120.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.