Users Guide

Parameters
rsa Enter the keyword rsa then the key size to generate a SSHv2 RSA host keys. The range
is from 1024 to 2048 if you did not enable FIPS mode; if you enabled FIPS mode, you can
only generate a 2048-bit key. The default is 1024.
rsa1 Enter the keyword rsa1 then the key size to generate a SSHv1 RSA host keys. The
range is from 1024 to 2048. The default is 1024.
Defaults Key size 1024; if you enable FIPS mode, the key size is 2048.
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage Information
The host keys are required for key-exchange by the SSH server. If the keys are not found when you enable the
server (ip ssh server enable), the keys are automatically generated.
This command requires user interaction and generates a prompt prior to overwriting any existing host keys.
NOTE: Only a user with superuser permissions should generate host-keys.
Example
Dell(conf)#crypto key generate rsa
Enter key size <1024-2048>. Default<1024> :
Host key already exists. Overwrite (y/n)?y
Generating 1024-bit SSHv2 RSA key.
! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !
Dell(conf)#
Dell(conf)#crypto key generate rsa1
Enter key size <1024-2048>. Default<1024> :
Host key already exists. Overwrite (y/n)?y
Generating 1024-bit SSHv1 RSA key.
! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !
Dell(conf)#
Related Commands
ip ssh server — enables the SSH server.
show crypto — displays the SSH host public keys.
debug ip ssh
Enables collecting SSH debug information.
Syntax
debug ip ssh {client | server}
To disable debugging, use the no debug ip ssh {client | server} command.
Parameters
client Enter the keyword client to enable collecting debug information on the client.
server Enter the keyword server to enable collecting debug information on the server.
Defaults Disabled on both client and server.
Command Modes EXEC
1184 Security