Crypto Key Pubkey-Chain Ssh - Cisco 300 Series Cli Manual

Small business 300 series managed switches command line interface guide release 1.3

Hide thumbs Also See for 300 Series:

Table of Contents

Telnet, Secure Shell (SSH) and Secure Login (Slogin) Commands

78-21075-01 Command Line Interface Reference Guide

Use the no form of this command to disable this function.

ip ssh password-auth

no ip ssh password-auth

Default Configuration

Password authentication of incoming SSH sessions is disabled.

Command Mode

Global Configuration mode

User Guidelines

This command enables password authentication by a local SSH server of remote

SSH clients.

The local SSH server advertises all locally-enabled SSH authentication methods

and a remote SSH client must select one of them.

If the password method was chosen by the client, management access is granted

after the client is authenticated by SSH using the regular user authentication

(AAA). No login is needed from the device management.

If no SSH authentication method is enabled, management access is granted only if

the user is authenticated by the device management (through AAA). If no SSH

authentication method is selected, SSH is enabled, but neither SSH authentication

by public key nor password is enabled.

The following example enables password authentication of the SSH client.

switchxxxxxx

(config)# ip ssh password-auth

crypto key pubkey-chain ssh

The crypto key pubkey-chain ssh Global Configuration mode command enters the

SSH Public Key-chain Configuration mode. This mode is used to manually specify

device public keys, such as SSH client public keys.