Public-Private key only Authentication

[NielsvdBerghe]

Hi,

I'm wondering if it's possible to configure SSH on a Cisco router to only allow Public-Private key authentication. So no passwords, true SSH.

I know this is possible on a Linux server, but I haven't been able to find anything on this for Cisco.

[Marvin Rhoads]

Yes, this can be done.

I haven't see it in the networks I've encountered but the method for configuration is described in this document section:

"Configuring the Cisco IOS SSH Server to Perform RSA-Based User Authentication"