step by step setup ssh user login cat 9200

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-18-2019 09:18 AM
IOS 16.11.x.x
Can someone help me setup SSH login and disable telnet on the switch using CLI ?
- Labels:
-
Catalyst 9000
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-18-2019 09:23 AM
Here is the link a configuration document for SSH. you can disable/not enable telnet access in the vty section.
https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-18-2019 09:37 AM
adding to another post there are good guide secure Harding cisco devices
https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-18-2019 09:40 AM
hostname(config)#username user123 privilege 15 password 7 P@ssw0rd
Invalid encrypted password: P@ssw0rd

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-18-2019 09:48 AM
Use of Type 7 Passwords
Originally designed in order to allow quick decryption of stored passwords, Type 7 passwords are not a secure form of password storage. There are many tools available that can easily decrypt these passwords. The use of Type 7 passwords should be avoided unless required by a feature that is in use on the Cisco IOS device.
Type 9 (scrypt) should be used whenever possible:
username <username> privilege 15 algorithm-type scrypt secret <secret>
