Discussion on:
View:
Show:
This is free on IOS switches, but you don't get this for free on IOS routers. The basic IOS has no SSH capability.
George Ou
Contributing editor - ZDNet
http://blogs.zdnet.com/Ou
George Ou
Contributing editor - ZDNet
http://blogs.zdnet.com/Ou
This is free on IOS switches, but you don't get this for free on IOS routers. The basic IOS has no SSH capability.
George Ou
Contributing editor - ZDNet
http://blogs.zdnet.com/Ou
George Ou
Contributing editor - ZDNet
http://blogs.zdnet.com/Ou
Hi George,
Thanks for your post.
It is true that SSH is not included in the basic version of the IOS. The only way to get SSH is to have a DES or 3DES version of the IOS.
In the article, it said this: "however, it does require the Data Encryption Standard (DES) or triple DES (3DES) IPSec encryption version of the IOS."
Thanks for reading TechRepublic!
David
Thanks for your post.
It is true that SSH is not included in the basic version of the IOS. The only way to get SSH is to have a DES or 3DES version of the IOS.
In the article, it said this: "however, it does require the Data Encryption Standard (DES) or triple DES (3DES) IPSec encryption version of the IOS."
Thanks for reading TechRepublic!
David
One bright spot is that Cisco is starting to give SSH capability to IOS devices that don't have DES/3DES capability. I hope this trend continues. Surely they can give you SSH with the IPSEC capability disabled.
If you have a router that does not have ssh on it
(you can tell by going to global config and typing "ip ssh ?" to see if you get options), then you need one of the encrypted versions of the IOS. To get this, you much purchase a license for it through a Cisco reseller. If you already have a DES license of the IOS and have maintenance on that router, you can go to the Cisco software download center and download a DES or 3DES version.
David
(you can tell by going to global config and typing "ip ssh ?" to see if you get options), then you need one of the encrypted versions of the IOS. To get this, you much purchase a license for it through a Cisco reseller. If you already have a DES license of the IOS and have maintenance on that router, you can go to the Cisco software download center and download a DES or 3DES version.
David
I tried to compile frequently asked questions about Cisco SSH implementation like what if I change domain name after key has been created. You can find them at http://cisco-network.com/hands-on/advanced-ssh-settings-for-cisco-ios/ .
PLEASE HELP !
For the last couple of days I have been trying to solve a great ssh2 mystery for my switch ws2950 (ver 12.1(22)ea13):
I put:
(config) Username tadas password cisco
But after show run I get: username tadas password 0 cisco
So the question is: why do i get password 0 cisco ? And in fact none of my (0 cisco or just cisco) passwords works for logging into switch via ssh2. I am using Tera Term Web 3.1 Though i don't have any problem to connect via com1.
For the last couple of days I have been trying to solve a great ssh2 mystery for my switch ws2950 (ver 12.1(22)ea13):
I put:
(config) Username tadas password cisco
But after show run I get: username tadas password 0 cisco
So the question is: why do i get password 0 cisco ? And in fact none of my (0 cisco or just cisco) passwords works for logging into switch via ssh2. I am using Tera Term Web 3.1 Though i don't have any problem to connect via com1.
Crypto key generate rs is not working on cisco 3560 switch
Make sure your IOS is xxxxx-xxxxxxxxxk9-x. If not, then you have to upgrade the IOS.
- Keyboard Shortcuts:
- Prev
- Next
- Toggle
