User's Manual

Chapter 34 System Remote Management
NXC CLI Reference Guide
216
This command sets an authentication method used by the HTTP/HTTPS server to authenticate
the client(s).
This following example sets a certificate named MyCert used by the HTTPS server to
authenticate itself to the SSL client.
34.4 SSH
Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure
communication protocol that combines authentication and data encryption to provide secure
encrypted communication between two hosts over an unsecured network.
34.4.1 SSH Implementation on the NXC
Your NXC supports SSH versions 1 and 2 using RSA authentication and four encryption
methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the NXC
for remote management on port 22 (by default).
34.4.2 Requirements for Using SSH
You must install an SSH client program on a client computer (Windows or Linux operating
system) that is used to connect to the NXC over SSH.
34.4.3 SSH Commands
The following table describes the commands available for SSH. You must use the configure
terminal
command to enter the configuration mode before you can use these commands.
Router# configure terminal
Router(config)# ip http authentication Example
Router# configure terminal
Router(config)# ip http secure-server cert MyCert
Table 127 Command Summary: SSH
COMMAND DESCRIPTION
[no] ip ssh server Allows SSH access to the NXC CLI. The
no
command disables SSH access to the NXC CLI.
[no] ip ssh server cert certificate_name Sets a certificate whose corresponding private
key is to be used to identify the NXC for SSH
connections. The
no command resets the
certificate used by the SSH server to the factory
default (
default).
certificate_name: The name of the
certificate. You can use up to 31 alphanumeric
and ;‘~!@#$%^&()_+[]{}’,.=-
characters.