Difference between revisions of "Enabling SSH and disabling telnet to Cisco switch"
From Notes_Wiki
m |
m |
||
Line 1: | Line 1: | ||
[[Main Page|Home]] > [[Switch configuration notes]] > [[Enabling SSH and disabling telnet to Cisco switch]] | |||
First one should upgrade to latest crypto IOS available. Crypto IOS files generally have letter 'k' in their names. Then we can enable ssh and disable telnet using: | First one should upgrade to latest crypto IOS available. Crypto IOS files generally have letter 'k' in their names. Then we can enable ssh and disable telnet using: | ||
Line 24: | Line 23: | ||
[[Main Page|Home]] > [[Switch configuration notes]] > [[Enabling SSH and disabling telnet to Cisco switch]] |
Latest revision as of 01:51, 28 March 2022
Home > Switch configuration notes > Enabling SSH and disabling telnet to Cisco switch
First one should upgrade to latest crypto IOS available. Crypto IOS files generally have letter 'k' in their names. Then we can enable ssh and disable telnet using:
conf t ip domain-name sbarjatiya.com username admin password examplepw level 15 crypto key generate rsa modulus 2048 line vty 0 15 login local transport protocol ssh OR transport input ssh end wr
- To keep both telnet and ssh enabled we can use 'transport protocol ssh telnet' or 'transport input telnet ssh' based on switch model.
- Domain name is set since switch will try to generate key for '<switch_name>.<domain_name>'
One must verify that things are working properly before terminating current session to switch.
Note: This would also cause http to be disabled. Hence connecting to switch using browser or Cisco Network Assistant would not be possible.
Home > Switch configuration notes > Enabling SSH and disabling telnet to Cisco switch