switches ssh remotely

[pcfreak49]

anyone know which cisco switches that you can remotely log into SSH because I have just bought a switch supported by Cisco that can not use ssh, but who can help me

[Reza Sharifi]

To use SSH, you need to download on IOS image that has K9 in it

see example below:

c3750e-universalk9-mz.122-46.SE.bin

HTH

Reza

[pcfreak49]

I bought a 2960 series that would follow cisco ssh support?

[Reza Sharifi]

SSH is no switched dependent.  It is based on the IOS Image. Not every image supports SSH

[pcfreak49]

but according to cisco switches support the ssh?

[Leo Laohoo]

All Cisco appliance support SSH as long as you have the correct FEATURE SET.

[pcfreak49]

How can I configure the switches

[Leo Laohoo]

How can I configure the switches

Configuring Secure Shell (SSH) on Routers and Switches Running Cisco IOS

Configure Secure Shell (SSH) on Catalyst Switches Running CatOS

[pcfreak49]

've tried everything but does not have visited different site but no result

[darren.g]

pcfreak49 wrote:
How can I configure the switches

1) Plug intot he console port using an appropriate serial cable and a port configured at 9600 N/8/1

2) If there is an IP address configured on the switch you can usually telnet (NOT SSH) into it.

3) As a last resort, try accessing the web interface via HTTP.

[pcfreak49]

I can not use telnet, the aim of making remote access security

according to cisco can do both telnet and ssh key cryptosystem as I can to make but I can not leach into

[darren.g]

pcfreak49 wrote:
I can not use telnet, the aim of making remote access security
 according to cisco can do both telnet and ssh key cryptosystem as I can to make but I can not leach into

SSH does not guarantee secure remote access - all it does is reduce the possibility of someone sniffing your password - it doesn't stop someone who knows/finds your password (or keyfile) from accessing your switches.

If you really must have SSH, then your options are as stated by others - download and install an image which supports SSH (a K9 image) on your switch, and then enable it on your VTY interfaces.

You could also consider adding an access list to your VTY ports allowing login only from supported IP addresses - this'll provide a bit more security, but even that can be spoofed by a determined enough attacker.

Good luck.

[pcfreak49]

I have this version of switch-mz.122-C2960G-lanbasek9 55.SE1.bin