Reference Guide

Security | 741
To disable SSH server functions, enter no ip ssh server enable.
Using SCP with SSH to copy a software image
To use Secure Copy (SCP) to copy a software image through an SSH connection from one switch to
another, use the following procedure:
This example shows the use of SCP and SSH to copy a software image from one switch running SSH
Server on UDP port 99 to the local switch:
Figure 41-7. Using SCP to copy from an SSH Server on another Switch
Other SSH-related commands include:
•
crypto key generate: Generate keys for the SSH server.
•
debug ip ssh: Enables collecting SSH debug information.
•
ip scp topdir: Identify a location for files used in secure copy transfer.
•
ip ssh authentication-retries: Configure the maximum number of attempts that should be used to
authenticate a user.
•
ip ssh connection-rate-limit: Configure the maximum number of incoming SSH connections per
minute.
•
ip ssh hostbased-authentication enable: Enable hostbased-authentication for the SSHv2 server.
•
ip ssh key-size: Configure the size of the server-generated RSA SSHv1 key.
•
ip ssh password-authentication enable: Enable password authentication for the SSH server.
•
ip ssh pub-key-file: Specify the file to be used for host-based authentication.
•
ip ssh rhostsfile: Specify the rhost file to be used for host-based authorization.
•
ip ssh rsa-authentication enable: Enable RSA authentication for the SSHv2 server.
•
ip ssh rsa-authentication: Add keys for the RSA authentication.
Step Task Command Syntax Command Mode
1 On Chassis One, set the SSH port
number (port 22 by default).
ip ssh server port number CONFIGURATION
2 On Chassis One, enable SSH. ip ssh server enable CONFIGURATION
3 On Chassis Two, invoke SCP. copy scp: flash: CONFIGURATION
4 On Chassis Two, in response to prompts,
enter the path to the desired file and enter
the port number specified in Step 1.
EXEC Privilege
.FTOS#copy scp: flash:
Address or name of remote host []: 10.10.10.1
Port number of the server [22]: 99
Source file name []: test.cfg
User name to login remote host: admin
Password to login remote host: