Security | 495
Figure 28-8. Specifying an SSH version
To disable SSH server functions, use the no ip ssh server enable command.
Using SCP with SSH to Copy a Software Image
To use SCP to copy a software image through an SSH connection from one switch to another, follow these
steps:
Figure 28-9 shows the use of SCP and SSH to copy a software image from one switch running SSH Server
on UDP port 99 to the local switch:
Figure 28-9. Using SCP to copy from an SSH Server on another Switch
Other SSH-related commands include:
•
crypto key generate: Generate keys for the SSH server.
•
debug ip ssh: Enables collecting SSH debug information.
•
ip scp topdir: Identify a location for files used in secure copy transfer.
Step Task Command Syntax Command Mode
1 On Chassis One, set the SSH port
number (port 22 by default).
ip ssh server port number
CONFIGURATION
2 On Chassis One, enable SSH.
ip ssh server enable
CONFIGURATION
3 On Chassis Two, invoke SCP.
copy scp: flash:
CONFIGURATION
4 On Chassis Two, in response to prompts,
enter the path to the desired file and enter
the port number specified in Step 1.
EXEC Privilege
FTOS(conf)#ip ssh server version 2
FTOS(conf)#do show ip ssh
SSH server : disabled.
SSH server version : v2.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA Authentication : disabled.
Vty Encryption Remote IP
FTOS#copy scp: flash:
Address or name of remote host []: 10.10.10.1
Port number of the server [22]: 99
Source file name []: test.cfg
User name to login remote host: admin
Password to login remote host:
Destination file name [test.cfg]: test1.cfg