Command Line Interface
656 1553-KDU 137 365 Uen D 2006-06-16
Configuration Guidelines
The SSH server on the ECN330-switch supports both password and public key
authentication. If password authentication is specified by the SSH client, then
the password can be authenticated either locally or through a RADIUS or
TACACS+ remote authentication server, as specified by the authentication
login command on page 637. If public key authentication is specified by the
client, then authentication keys must be configured on both the client and the
ECN330-switch as described in the following section. Note that regardless of
whether public key or password authentication is used, authentication keys still
have to be generated on the ECN330-switch and the SSH server enabled.
copy tftp
public-key
Copies the user’s public key from a TFTP server to the
ECN330-switch
PE 561
delete public-
key
Deletes the public key for the specified user PE 662
ip ssh crypto
host-key
generate
Generates the host key PE 663
ip ssh crypto
zeroize
Clear the host key from RAM PE 664
ip ssh save
host-key
Saves the host key from RAM to flash memory PE 665
disconnect Terminates a line connection PE 582
show ip ssh Displays the status of the SSH server and the
configured values for authentication timeout and
retries
PE 666
show ssh Displays the status of current SSH sessions PE 666
show public-
key
Shows the public key for the specified user or for the
host
PE 668
show users Shows SSH users, including privilege level and public
key type
PE 549
Command Function Mode Page