CW2K > Netconfig > script/template for enabling ssh ??

[jason.aarons]

Customer has 130 3550 switches, 170 APs and 50 Routers (12.2T). They want to run a netconfig job to enable ssh everywhere. Can this be done? Is there a netconfig template for this? The key generation usually comes backs requesting input, etc.

NW-DC-RAS1(config)#crypto key generate rsa

The name for the keys will be: router1.local.lan

Choose the size of the key modulus in the range of 360 to 2048 for your

General Purpose Keys. Choosing a key modulus greater than 512 may take

a few minutes.

How many bits in the modulus [512]:

and sometimes the device already has a key (you don't see this via a show running-config)

NW-DC-RAS1(config)#crypto key generate rsa

% You already have RSA keys defined named NW-DC-RAS1.stellarishealth.net.

% Do you really want to replace them? [yes/no]:

[jason.aarons]

I should clarify all devices are SSH capable, already have the correct K9 IOS loaded, it just needs to be turned on everywhere.

[steve.busby]

You don't mention your CW2K version or OS, but RME 3.5, IDU 9 on W2K, has a SSH Template for IOS devices.

It asks for Hostname/Domain Name/No. of Key Bits/SSH Timeout/No.of Authentication Retries

Unfortunately, it would appear all devices would have to have the same hostname. Unless you could wild-card it or somehow have it grab the existing hostname.