Is the console more secure than ssh when using show tech-support?

[ohchan]

Hi

Last time I accessed C4506 remotely via ssh and used the show tech-support command.

The result is a hardware fault.

I try to access the C4056 through the console and run the show tech-support command.

Is it more secure than ssh?

[Leo Laohoo · Accepted solution]

No difference in output.

[ohchan]

thank you for the reply

ssh, you mean there is no difference for console CPU output?

[Leo Laohoo]

---

@ohchan wrote:

ssh, you mean there is no difference for console CPU output?

---

Depends on the platform, depends on the supervisor engine, IOS version.

Your questions have nothing to do with CSCul00025 &/or CSCvd29392, does it?

[ohchan]

yes different

As soon as I entered the show tech-support command, the device had to be replaced after a reboot.

The work was done during the day and "show tech-support" was done during peak packet throughput times.

This time, I'm going to proceed with the console, but I'm curious if it's safer.

[balaji.bandi · Accepted solution]

There is nothing called secure here, show tech we use to get information for TAC support.

when you issue this command the switch will take some CPU process, so this command needs to be used with bit cautious all the time when you doing a busy switch in a production network.

output is the same SSH or Console..

[Joseph W. Doherty]

From reading your OP and follow up posts, are you actually asking about security or impact to device?

For the former, perhaps in theory, console would be more secure than SSH, as the latter would more likely allow a man-in-the-middle, although, of course, SSH encrypts the data which console does not.  But, in your console connection is really "local" to the device, tapping the line should be more "noticeable".  Of course, if your console link is "remote", than it's like less secure.

As to impact on the device, later Cisco devices often support encryption with some form of hardware support.  With such, in theory, likely it's less impactful than a console link, where RS-232 is likely to going to generate more hardware interrupts.