Configure Secure Shell (SSH) server and client SSH parameters
Digi TransPort WR Routers User Guide 487
SSH parameters
To fully configure SSH, a version1 SSH key and a version 2 SSH key need to be generated and the
router configured to use them, described in the following topics.
Note SSH version 2 is more secure than version 1 and so is the recommended version to use.
However, some SSH clients may only support version 1 keys and so the router supports both
version 1 and version 2 SSH.
Generate an SSH private key from the web interface
1 Navigate to Administration > X.509 Certificate Management > Key Generation and select the
size of the key file from the drop-down list. The larger the key file, the more secure it will be.
2 In the Key filename box, enter the name for the key file, or select from those already present
using the drop-down selector. The filename should have a prefix of priv and a file extension of
.pem, such as privssh1.pem. The 8.3 file name convention applies.
3 Check the checkbox marked Save in SSHv1 format to generate a version 1 SSH key. Click the
Generate Key button to generate the private key file. The key file is then stored in the router’s
FLASH filing system.
4 To generate the second key, repeat steps 1 through 3. This time, make sure that the
Save in SSHv1 format checkbox is unchecked. Give this key file a different name than the
version 1 file previously generated.
5 On the Configuration > Network > SSH Server > SSH Server n page, enter the filename
generated in step 3 into the Host Key 1 Filename text box and the filename generated in step 4
into the Host Key 2 Filename text box.
6 Click the Apply button at the bottom of the page to apply changes. When the
Configuration successfully applied message is displayed, click on the highlighted link to save
the configuration.