Instead of using telnet (un-encrypted) a router can be connected via Secure Shell (SSH) which is more secure.
To enable SSH on a router an IOS with des or 3des encryption is required.
Follow the next steps to enable SSH:
• Configure the hostname command.
• Configure the DNS domain.
• Generate the SSH key to be used.
• Enable SSH transport support for the virtual type terminal (vty)
The hostname and DNS domain are necessary to generate a SSH key.
Example SSH configuration:
hostname ssh-router
aaa new-model
username cisco password cisco
ip domain-name routers.local
! Generate an SSH key
cry key generate rsa
ip ssh time-out 60
ip ssh authentication-retries 2
!--- disable Telnet and enable SSH
line vty 0 4
transport input SSH
Commands to verify SSH configuration:
• show ssh
• show ip ssh
• debug ip ssh
|
