Specifications

2-158
Cisco SCE 2000 and SCE 1000 CLI Command Reference
OL-26797-03
Chapter 2 CLI Command Reference
ip ssh key
ip ssh key
Generates or removes the SSH key set. A set of keys must be generated at least once before enabling the
SSH server.
ip ssh key [generate|remove]
Syntax Description
Command Default This command has no default settings.
Command Modes Global configuration
Command History This table includes the following release-specific history entries:
Usage Guidelines Each SSH server should define a set of keys (DSA2, RSA2 and RSA1) to be used when communicating
with various clients. The key sets are pairs of public and private keys. The server publishes the public
key while keeping the private key in non-volatile memory, never transmitting it to SSH clients.
Note that the keys are kept on the tffs0 file system, which means that a person with knowledge of the
‘enable ’ password can access both the private and public keys. The SSH server implementation provides
protection against eavesdroppers who can monitor the management communication channels of the SCE
platform, but it does not provide protection against a user with knowledge of the ‘enable’ password.
When using an SSH server, you should also do the following:
• Enable the SSH server (ip ssh command).
• Assign an ACL to the SSH server (ip ssh access-class command).
Authorization: admin
Examples The following examples illustrate how to use this command.
EXAMPLE 1:
The following example generates a new SSH key set.
SCE>enable 10
Password:<cisco>
SCE#config
SCE(config)#ip ssh key generate

SCE(config)#
generate generates a new SSH key set and saves it to non-volatile memory. Key size
is always 2048 bits.
remove removes the existing key set.
Release Modification
2.5.7 This command was introduced.