topic Re: Router Authentication in Network Access Control

Router Authentication

phoonts01 — Fri, 21 Feb 2020 18:18:05 GMT

Does all IOS support the above? Do I need to look for the feature set that support it? Which version and above uses this command "crypto key pubkey-chain dss" and which version and below uses the old command "crypto public-key"

Re: Router Authentication

Richard Burts — Fri, 20 Apr 2007 17:55:16 GMT

Tuck

All versions and all feature sets of IOS support router authentication.

HTH

Rick

Re: Router Authentication

med_ddevlin — Tue, 01 May 2007 18:05:43 GMT

The command "crypto key pubkey-chain dss" was introduced in IOS version 11.2.

Please rate if this helps.

Re: Router Authentication

phoonts01 — Thu, 03 May 2007 01:05:15 GMT

Just found out that Cisco took out the CET feature from 12.1 onwards.

I've about ten 2500 routers that only support the classic crypto which is the Cisco Encryption Technology (CET). Those routers are running IOS version 11.2(18)P. The new core router is a 3725 with IOS Advanced IP Services 12.4(2)XA1 which does not have CET.

I cannot upgrade the IOS of 2500 routers as they do not have enough memory to use IPSEC.

What other alternatives do I have based on what I have? As long as I can encrypt the line is good enough.

Appreciate to all who knows how and/or done this before.

thanks

Cheers,

Phoon

Re: Router Authentication

phoonts01 — Thu, 03 May 2007 01:17:57 GMT

I'm aware of the command but Cisco took out the dss parameter from 12.1 onwards. Now I can find rsa only.

Thanks.