topic ssh host keys on WLC in Wireless

ssh host keys on WLC

bgoulet00 — Sun, 04 Jul 2021 06:13:07 GMT

How do you properly configure SSH keys on a WLC? On IOS I normally set the domain name of our organization on the system and then use the "crypto key generate rsa" command. I have found the WLC "network ssh host-key generate" generate command but can't find a way to set the domain name. I also don't see any way to specify the cypher or key size and can't find any documentation on what the default cypher and key size are. Do I need to install a certificate and use "ssh host-key use-device-certificate-key" instead if i want control over those items?

Re: ssh host keys on WLC

Amjad Abdullah — Thu, 13 Dec 2012 10:21:57 GMT

This is a valuable question that I could not answer.
I think Saravanan can help us at this point.
Saravanan where are you? 🙂

Sent from Cisco Technical Support iPad App

Re: ssh host keys on WLC

Stephen Rodriguez — Thu, 13 Dec 2012 19:41:11 GMT

Are you having an issue with ssh to the WLC?

By default they have SSH enabled am you should be able to get there.

Do keep in mind that it doesn't run IOS, so some features oY are used to do not work the same.

Steve

Sent from Cisco Technical Support iPhone App

ssh host keys on WLC

Amjad Abdullah — Fri, 14 Dec 2012 10:06:42 GMT

Steve:
I agree with you they do not work the same. But my concern when I saw the question is that there is no way to decide the cypher or the key size!!

Also the command:

ssh host-key use-device-certificate-key

What does it mean by the device certificate? SSL cert for management and web-auth? or something else? This is not clear at all and it needs to be documented. My search revealed nothing.

Rating useful replies is more useful than saying "Thank you"

ssh host keys on WLC

bgoulet00 — Fri, 14 Dec 2012 14:12:06 GMT

Steve,

I know that SSH is active out of the box and i'm not having any trouble ussing SSH to get to the device. Most modern IOS devices come with the functionality out of the box now too but it is our corporate policy to delete the default keys that came on the device and create new ones using RSA 128 linked with our domain name. I'm trying to maintain this policy on the controllers too if possible and also get some info on what the default key settings are.