Help regarding SSH

[mayankparekh13]

Hi all,

i have one 3750 switch ,with ios :ipbase-mz .when i have configure ssh they not support ,i think we have to change ios to ipbasek9-mz .can 3750 support that ? also pls suggest regarding ssh commands .

THANKS

Mayank

[kishan1984]

yes the ios u mentioned will support,for configuration part just refer to http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.1_19_ea1/configuration/guide/swauthen.html#wp1204628

[mayankparekh13]

thanks kishan ,

for these doc ,but one question is that the crypto generated rsa is stored where ? or we have to change crypto authentication but why ?

Regards

Mayank

[davy.timmermans]

to support SSH, you need indeed a K9 image.

Configuration:

username zzzz secret yyyy

ip domain-name a

hostname b

this will be used for creating the keys b.a

creating the keys:

crypto key generate rsa general-keys modulus

it's also possible to work without domain name via label parameter in the crypto key command

"crypto key generate rsa general-keys label LABEL modulus xxx" I think

modulus has to be at least 768 in order to support SSH2.

By default you will enable SSH v1 and SSH v2

eventually you can change this to SSH2 only (show ip ssh will display 1.99 as version):

ip ssh version 2

line vty 0 15

login local

A modulus of at least 1024 is recommended.

HTH

[mayankparekh13]

Thanks davy,

can i upgrade c3750-ipbase-mz.122-44. to c3750-ipbasek9-mz.122-44.

? or latest version ,

HTH

[glen.grant]

Yes you can upgrade to crypto version as long as you stay with the same ipbase feature set and you have a CCO account to download the images.