White Papers

• Congure the Dell Networking system as an SSH server that uses only version 1 or 2.
CONFIGURATION mode
ip ssh server version {1|2}
• Display SSH connection information.
EXEC Privilege mode
show ip ssh
Specifying an SSH Version
The following example uses the ip ssh server version 2 command to enable SSH version 2 and the show ip ssh command to
conrm the setting.
Dell(conf)#ip ssh server version 2
Dell(conf)#do show ip ssh
SSH server : disabled.
SSH server version : v2.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA Authentication : disabled.
To disable SSH server functions, use the no ip ssh server enable command.
Using SCP with SSH to Copy a Software Image
To use secure copy (SCP) to copy a software image through an SSH connection from one switch to another, use the following commands.
1 On Chassis One, set the SSH port number (port 22 by default).
CONFIGURATION mode
ip ssh server port number
2 On Chassis One, enable SSH.
CONFIGURATION mode
ip ssh server enable
3 On Chassis Two, invoke SCP.
CONFIGURATION mode
copy scp: flash:
4 On Chassis Two, in response to prompts, enter the path to the desired le and enter the port number specied in Step 1.
EXEC Privilege mode
Example of Using SCP to Copy from an SSH Server on Another Switch
Other SSH-related commands include:
• crypto key generate: generate keys for the SSH server.
• debug ip ssh: enables collecting SSH debug information.
• ip scp topdir: identify a location for les used in secure copy transfer.
• ip ssh authentication-retries: congure the maximum number of attempts that should be used to authenticate a user.
• ip ssh connection-rate-limit: congure the maximum number of incoming SSH connections per minute.
• ip ssh hostbased-authentication enable: enable host-based authentication for the SSHv2 server.
• ip ssh key-size: congure the size of the server-generated RSA SSHv1 key.
• ip ssh password-authentication enable: enable password authentication for the SSH server.
824
Security