- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 06:35 AM
Hi everyone, I am not clear about the speech of the ssh keys. In a lab to practice I created pc u server dns and a switch.
When I create the keys, after configuring vlan1 with its ip, I enter the domain name on the dns server and generate the keys as per the procedure. But the thing that is not clear to me is that I have not set any DNS server on the switch but only the IP address of Vlan 1. At this point, even if I use example.com as a domain, it generates the keys for me right? That is, it is not clear to me what server if I can put any domain x without even having pointed and configured it.
Solved! Go to Solution.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 08:39 AM
As far as I know SSH needs device host name and domain name but not DNS server. DNS server would be needed to connect to your switch via "friendly" host name and not by IP. DNS server would resolve host name to IP so that you can connect to it. That's why L2 switches usually have IP set on Interface Vlan 1 - to be able to connect to switch in order to manage it.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 10:15 AM
(Moving thread to proper forum)
The domain-name is just a value that Cisco historically required to use as input to the hash when creating the RSA key. It is completely independent of whether you use it for anything else or if it is even valid.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 11:21 AM - edited 04-24-2020 11:22 AM
Hello
You can generate ssh keys without specify a DNS domain using a label
example:
crypto key generate rsa label <any-name-you-wish> general-keys modulus <key size>
Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.
Kind Regards
Paul
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 08:39 AM
As far as I know SSH needs device host name and domain name but not DNS server. DNS server would be needed to connect to your switch via "friendly" host name and not by IP. DNS server would resolve host name to IP so that you can connect to it. That's why L2 switches usually have IP set on Interface Vlan 1 - to be able to connect to switch in order to manage it.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 10:13 AM
Create your host name
Create a domain name (no DNS server required)
Create your SSH keys
Apply to your VTY lines
Test and your golden.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 10:15 AM
(Moving thread to proper forum)
The domain-name is just a value that Cisco historically required to use as input to the hash when creating the RSA key. It is completely independent of whether you use it for anything else or if it is even valid.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 12:25 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2020 11:21 AM - edited 04-24-2020 11:22 AM
Hello
You can generate ssh keys without specify a DNS domain using a label
example:
crypto key generate rsa label <any-name-you-wish> general-keys modulus <key size>
Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.
Kind Regards
Paul
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-25-2020 01:11 AM
