Editing Cisco IOS: configure public RSA key authentication

Jump to navigation Jump to search

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
−
== Configure public RSA key authentication ==
+
 
−
Main [[Cisco IOS]] command: <code>[[ip ssh pubkey-chain]]</code><ref>https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/15-s/sec-usr-ssh-15-s-book/sec-secure-shell-v2.html</ref>
+
Main Command: <code>ip ssh pubkey-chain</code><ref>https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/15-s/sec-usr-ssh-15-s-book/sec-secure-shell-v2.html</ref>
  
 
Configuration Example in Linux:
 
Configuration Example in Linux:
Line 6: Line 6:
 
1. Generate your key if you do not have already one: <code>ssh-keygen</code>
 
1. Generate your key if you do not have already one: <code>ssh-keygen</code>
  
−
2. Split your key in 72 characters lines: <code>[[fold]] -b -w 72 ~/.ssh/id_rsa.pub</code> and copy output removing ssh-rsa and last part: username@hostname
+
2. Split your key in 72 characters lines: <code>fold -b -w 72 ~/.ssh/id_rsa.pub</code> and copy output removing ssh-rsa and last part: username@hostname
  
 
3. Configure switch/router
 
3. Configure switch/router
Line 28: Line 28:
 
View config:  
 
View config:  
 
* <code>[[show ip ssh]]</code>
 
* <code>[[show ip ssh]]</code>
−
* <code>[[show running-config]]</code>
 
−
.../...
 
−
ip ssh pubkey-chain
 
−
  username USERNAME1
 
−
  key-hash ssh-rsa 767FA62B914XX0094A293CE7E50C7E35
 
−
  username USERNAME2
 
−
  [[key-hash]] ssh-rsa C718DBA2DC9XX08C3BF35331E2E8EAt6
 
−
.../...
 
  
 
Posible errors:
 
Posible errors:
 
<code>%SSH: Failed to decode the Key Value</code>. Make sure you split your key on multiple lines with <code>[[fold]]</code> command
 
<code>%SSH: Failed to decode the Key Value</code>. Make sure you split your key on multiple lines with <code>[[fold]]</code> command
−
 
−
 
−
== Remove user from ssh authentication ==
 
−
Router_name_1#configure terminal
 
−
Router_name_1(config)#ip ssh pubkey-chain
 
−
Router_name_1(conf-ssh-pubkey)#no username YOUR_USERNAME
 
  
 
== Related Activities ==
 
== Related Activities ==
−
* [[Associate a user with default higher privileges]] using <code>[[username]]</code> command
+
* [[Cisco IOS/Associate a user with default higher privileges]] using <code>username</code> command
−
* Understand <code>[[login local]]</code> configuration command and implication on remote ssh access
 
  
 
== See also ==
 
== See also ==
 
* [[Digital Media Concepts/RSA (cryptosystem)]]
 
* [[Digital Media Concepts/RSA (cryptosystem)]]
 +
* [[OpenSSH/Configure OpenSSH to allow Public-key authentication]]
 +
* CompTIA [[IT Security/Access Control/Authentication and Authorization]]
 
* <code>[[ssh-keygen]]</code>
 
* <code>[[ssh-keygen]]</code>
−
* {{IOS ssh}}
 
  
 
[[Category: Cisco]]
 
[[Category: Cisco]]

Please note that all contributions to wikieduonline may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see Wikieduonline:Copyrights for details). Do not submit copyrighted work without permission!

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "https://www.wikieduonline.com/wiki/Cisco_IOS:_configure_public_RSA_key_authentication"

Advertising: