enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

[PaoloArnedo]

how do I enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960 switch - asking for some advices and preferable commands to enable it. thanks in advance!

[balaji.bandi]

check below command :

show ip ssh (show you what verion of ssh running)

this should be ssh version 2 as below example :

below commands to make 2048

config t

!

ip ssh dh min size 2048

!

end

check again -show ip ssh

[PaoloArnedo]

thank you for the information, for some reason I cannot go into "config t". do you know what could cause this?

[balaji.bandi]

>enable

#config t

or post the screenshot for reference

[PaoloArnedo]

Hello I am using  C2960L Software (C2960L-UNIVERSALK9-M), Version 15.2(7)E2 - i think this has no conf t command, please correct me if im wrong

[balaji.bandi]

unfortunatly we can not read someone what they seeing over there.. that is the reason we asked for screenshot here to help.

Cat 2960 Switch has that commands. (what you able to type ?) what prompt are you > or #

Do you have enough rights as admin to go in to config t mode ?

press ? and post the output here  to tell you

show priv (tell you what rights you have)

[PaoloArnedo]

what prompt are you > or # - i am prompted on # which means it is already enabled

#show priv
Current privilege level is 15

[balaji.bandi]

you have priv 15, and you enable mode - when you type :

#config t  ( what error you get ?)

[PaoloArnedo]

I sent a screenshot for the error

[balaji.bandi]

This looks for me you do not have enough rights to get in to config mode

Reasons :

1. you have priv 15, but restricted commands

2. or centralise radius have restricting the access.

show run (are you able to view config ?) if so post that output here ?

[PaoloArnedo]

this is the message I am receiving Sir

[balaji.bandi]

his looks for me you do not have enough rights to get in to config mode
Reasons :
1. you have priv 15, but restricted commands
2. or centralise radius have restricting the access.
show run (are you able to view config ?) if so post that output here ?

post below inflormation

show version

show run

(are you able to view config ?) if so post that output here ?

[Rob Ingram]

@PaoloArnedo provide a screenshot of the error you receive when you cannot access "conf t" - perhaps you have TACACS enabled and you don't have rights to that command, regardless seeing the error would help.