Nexus 9000 SSH Configuration

[Thushan Pramod]

Hi Experts,

Please guide me to configure SSH on nexus 9000. I found out that it is different fro IOS, so appreciate the guidance.

[mvsheik123]

Hi,

Check the below link..

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_chapter_01000.html#con_1...

You need to issue 'feature ssh' to enable this and rest is same as IOS.

hth

MS

[Thushan Pramod]

Hi,
Is it all required as mentioned in the guide? In IOS we need to do some configuration under line VTY like " transport input ssh ".
what about the user credentials. Will it use the username and passwords we configure in global config.

Please confirm the below config.

configure terminal
no feature ssh
ssh key {dsa [force ] | rsa [bits[force ]] | ecdsa [bits [ force ]]}
feature ssh
exit
(Optional) show ssh key [dsa | rsa | ] []
(Optional) copy running-config startup-config
Then we have to provide the username and password in global config. Then if we have the connectivity to the switch we can access via SSH and can use the credentials which we configure under global config right? Please do reply.

[mvsheik123]

Hi,

I do not have 9300 to test but here is what I suggest (basic steps)...

1. Assign host name to the switch 

2. Create local admin with password

2. feature ssh
3. Crypto key generate rsa modulus 2048 (if that does not work try what listed in doc -ssh key rsa 2048)

Test ssh access from management workstation (make sure management workstation able to reach switch).

hth

MS

[aysar3000]

Hello Thushan

configure it as below

conf t
feature ssh
ssh key rsa 2048 force

username admin password yorupassword  role network-admin

now when you ssh issue
ssh admin@192.168.1.1
type yes for certificate
and then enter the password

192.168.1.1 represent the nexus ip address that you trying to access

please rate if helpfull