View source for Enabling SSH and disabling telnet to Cisco switch

[[Main Page|Home]] > [[Switch configuration notes]] > [[Enabling SSH and disabling telnet to Cisco switch]]

First one should upgrade to latest crypto IOS available. Crypto IOS files generally have letter 'k' in their names. Then we can enable ssh and disable telnet using:

<pre>
conf t
    ip domain-name sbarjatiya.com
    username admin password examplepw level 15
    crypto key generate rsa modulus 2048
    line vty 0 15
        login local
        transport protocol ssh OR transport input ssh
    end
    wr
</pre>

*To keep both telnet and ssh enabled we can use '<tt>transport protocol ssh telnet</tt>' or '<tt>transport input telnet ssh</tt>' based on switch model.
*Domain name is set since switch will try to generate key for '&lt;switch_name&gt;.&lt;domain_name&gt;</tt>'

One must verify that things are working properly before terminating current session to switch.

''Note: This would also cause http to be disabled. Hence connecting to switch using browser or Cisco Network Assistant would not be possible.''



[[Main Page|Home]] > [[Switch configuration notes]] > [[Enabling SSH and disabling telnet to Cisco switch]]