To generate or erase the switch public/private host key pair:īecause the host key pair is stored in flash instead of the running-config file, it is not necessary to use write memory to save the key pair. However, any active SSH sessions will continue to run, unless explicitly terminated with the CLI kill command. To verify whether SSH is enabled, execute show ip ssh. Removing (zeroing) the switch public/private key pair renders the switch unable to engage in SSH operation and automatically disables IP SSH on the switch.
Otherwise, you must re-introduce the switch public key on all management stations you have set up for SSH access to the switch using the earlier pair.
Consider this key pair to be "permanent" and avoid re-generating the key pair without a compelling reason. Also, the switch maintains the key pair across reboots, including power cycles. NOTE: When generating a host key pair on the switch, the switch places the key pair in flash memory and not in the running-config file. It is a temporary, internally generated pair used for a particular switch/client session, and then discarded.) (The session key pair mentioned above is not visible on the switch. See the documentation for your SSH client application for more details. Other SSH applications require you to manually create a known hosts file and place the switch public key in the file. Some SSH client applications automatically add the switch public key to a "known hosts" file. The public key should be added to a "known hosts" file (for example, $HOME/.ssh/known_hosts on UNIX systems) on the SSH clients which should have access to the switch. The host key pair is stored in the switch flash memory, and only the public key in this pair is readable. The switch uses this key pair along with a dynamically generated session key pair to negotiate an encryption method and session with an SSH client trying to connect to the switch.
Generate the switch public and private key pair.Ī public and private host key pair must be generated on the switch. Please retype new password for manager: ******* Please retype new password for operator: ********
0 kommentar(er)
