59
1147
•
ip-address
—Specifies the address of an SSH server. The IP address can
be an IPv4, IPv6 or IPv6z address. See IPv6z Address Conventions.
•
fingerprint
—FIngerprint of the SSH server public key (32 Hex characters).
Default Configuration
The Trusted Remote SSH Server table is empty.
Command Mode
Global Configuration mode
User Guidelines
Fingerprints are created by applying a cryptographic hash function to a public key.
Fingerprints are shorter than the keys they refer to, making it simpler to use (easier
to manually input than the original key). Whenever the switch is required to
authenticate an SSH server's public key, it calculates the received key's fingerprint
and compares it to the previously-configured fingerprint.
The fingerprint can be obtained from the SSH server (the fingerprint is calculated
when the public key is generated on the SSH server).
The no ip ssh-client server fingerprint command removes all entries from the
Trusted Remote SSH Server table.
Example
In the following example, a trusted server is added to the Trusted Servers table
(with and without a separator ":"):
switchxxxxxx(config)#
DC789788DC88A988127897BCBB789788
switchxxxxxx(config)#
DC:78:97:88:DC:88:A9:88:12:78:97:BC:BB:78:97:88
59.7 ip ssh-client source-interface
To specify the source interface which IPv4 address will be used as the Source
IPv4 address for communication with IPv4 SSH servers, use the ip ssh-client
source-interface Global Configuration mode command. To restore the default
configuration, use the no form of this command.
ip ssh-client server fingerprint 1.1.1.1
ip ssh-client server fingerprint 1.1.1.1
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
SSH Client Commands