topic Re: ssh v2 in Network Security

ssh v2

rehbejoh36 — Wed, 24 Aug 2022 14:03:56 GMT

I was asked to only use ssh v2 on my cisco switch.If i use command show ip ssh it says version 1.99 and from what I read that means Im using ssh v1 and v2 so how do I disable ssh v1 and use only v2.

Re: ssh v2

Rob Ingram — Wed, 24 Aug 2022 14:06:37 GMT

@rehbejoh36 use the command "ip ssh version 2"

Re: ssh v2

rehbejoh36 — Wed, 24 Aug 2022 14:16:15 GMT

If I use command ip ssh version 2 it says invalid input

Re: ssh v2

rehbejoh36 — Wed, 24 Aug 2022 14:18:07 GMT

unknow command

Re: ssh v2

Rob Ingram — Wed, 24 Aug 2022 14:22:00 GMT

@rehbejoh36 what model switch and which version of firmware?

3560-8(config)#ip ssh version 2
3560-8(config)#
3560-8(config)#do show ip ssh
SSH Enabled - version 2.0

Re: ssh v2

rehbejoh36 — Wed, 24 Aug 2022 14:24:51 GMT

c2960x version 15.2

Re: ssh v2

Rob Ingram — Wed, 24 Aug 2022 14:37:40 GMT

SSH version 2 is supported on that version. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-2_7_e/b_1527e_consolidated_2960x_cg/secure_shell_version_2_support.html

Provide a screenshot of you configuring the command and the error.

What RSA key size have you configured? It needs to be greater than 768 bits for SSH version 2.

Use "crypto key generate rsa modulus 2048" and then run "ip ssh version 2".

Re: ssh v2

rehbejoh36 — Wed, 24 Aug 2022 14:41:52 GMT

Sorry I think that got worked.It said invalid but if I use command show ip ssh it now shows ssh enabled - version 2.0 where it was showing 1.99.

Thank you

Re: ssh v2

Rob Ingram — Wed, 24 Aug 2022 15:09:20 GMT

@rehbejoh36 there is only one command, you probably entered the command provided above wrong first time.