Quick Reference Guide

Providing User Access Security | 143
2. To verify that the server has started, use the show ip ssh command to show the SSH server status.
Figure 9-108. Using the show ip ssh Command to Show SSH Server Status
3. Use the show logging command to check the log file for the following messages (You can also see
these messages in real time if you use the command
logging console 7):
Figure 9-109. Using the show logging Command to Display SSH Server Status
4. Using an SSH client, connect to the switch and log in to verify that the SSH server is working.
5. Once you have verified that you can connect to the switch with an SSH client, the Telnet server can be
disabled (if it was enabled) with the
no ip telnet server enable command for additional
security. The Telnet server is disabled by default.
Force10 #show ip ssh
SSH Configuration
Administrative Mode: .......................... Enabled
Protocol Levels: .............................. Versions 1 and 2
SSH Sessions Currently Active: ................ 0
Max SSH Sessions Allowed: ..................... 5
SSH Timeout: .................................. 5
Force10 #show logging
JAN 01 00:31:54 192.168.0.34-1 UNKN[222273672]: sshd_control.c(444) 15 %% SSHD: sshdListenTask
started
JAN 01 00:31:54 192.168.0.34-1 UNKN[209305936]: sshd_main.c(596) 16 %% SSHD: successfully
opened file ssh_host_dsa_key
JAN 01 00:31:54 192.168.0.34-1 UNKN[209305936]: sshd_main.c(609) 17 %% SSHD: successfully
loaded DSA key
JAN 01 00:31:54 192.168.0.34-1 UNKN[209305936]: sshd_main.c(631) 18 %% SSHD: successfully
opened file ssh_host_rsa_key
JAN 01 00:31:54 192.168.0.34-1 UNKN[209305936]: sshd_main.c(643) 19 %% SSHD: successfully
loaded RSA2 key
JAN 01 00:31:56 192.168.0.34-1 UNKN[209305936]: sshd_main.c(353) 20 %% SSHD: Done generating
server key