Configuring The Switch For Secure Copy Protocol; Information About Secure Copy - Cisco IE-3000-8TC Software Configuration Manual

Software configuration guide

Hide thumbs Also See for IE-3000-8TC:

Table of Contents

Configuring the Switch for Secure Copy Protocol

The Secure Copy Protocol (SCP) feature provides a secure and authenticated method for copying switch

configurations or switch image files. SCP relies on Secure Shell (SSH), an application and a protocol

that provides a secure replacement for the Berkeley r-tools.

For SSH to work, the switch needs an RSA public/private key pair. This is the same with SCP, which

relies on SSH for its secure transport.

Because SSH also relies on AAA authentication, and SCP relies further on AAA authorization, correct

configuration is necessary.

When using SCP, you cannot enter the password into the copy command. You must enter the password

when prompted.

To configure the Secure Copy feature, you should understand these concepts.

The behavior of SCP is similar to that of remote copy (rcp), which comes from the Berkeley r-tools

suite, except that SCP relies on SSH for security. SCP also requires that authentication, authorization,

and accounting (AAA) authorization be configured so the router can determine whether the user has the

correct privilege level.

A user who has appropriate authorization can use SCP to copy any file in the Cisco IOS File System

(IFS) to and from a switch by using the copy command. An authorized administrator can also do this

from a workstation.

For more information on how to configure and verify SCP, see the "Secure Copy Protocol" chapter of

the Cisco IOS New Features, Cisco IOS Release 12.2, at this URL:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087b18

Cisco IE 3000 Switch Software Configuration Guide

Before enabling SCP, you must correctly configure SSH, authentication, and authorization on the

Because SCP relies on SSH for its secure transport, the router must have an Rivest, Shamir, and

Adelman (RSA) key pair.

Configuring Switch-Based Authentication

Show Quick Links

Table of Contents