SSH Disabling on reboot

[jvanderschyff]

Hi there,

I have a problem that I hope you guys can assist with. I have a 2950 router on which I want to enable SSH on. Everything is fine and well, until I reboot the router. Then it only starts working again, when I regenerate the certificates using:

crypto key generate rsa modulus 768

The above command then generates a cert, and enables the SSH service. But this doesn't persist when I do a reload. Any ideas how I can permanently enable SSH?

- Jaco

[gpulos]

did you do a 'write memory' command, to write the configuration change to memory?

if not, perform this and you should be good to reboot and reload WITH the changes still in effect.

[jvanderschyff]

I did issue the # wr command. After I create the crypto key, there is no indication that it is indeed part of the running config, and hence doesn't get saved to memory I presume. sh crypto displays the key, but it's not part of the "configuration" if you understand what I mean?

[sundar.palaniappan]

It could be an IOS bug.

What version are you using?

[jvanderschyff]

# sh version

Cisco Internetwork Operating System Software

IOS (tm) C2950 Software (C2950-I6K2L2Q4-M), Version 12.1(22)EA8a, RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2006 by cisco Systems, Inc.

Compiled Fri 28-Jul-06 17:00 by weiliu

Image text-base: 0x80010000, data-base: 0x8067A000

[m.sir · Accepted solution]

Try to delete RSA key with command

crypto key zeroize rsa

and than generate again with command ( i suggest with 1024 modulus)

crypto key generate rsa

save configuration

and try again

M.

[jvanderschyff]

WOW, it worked! Weird that had to first zero the size, and then create a key again before it would work. Also where is the key stored in flash somewhere?