Generating Ssh Client Key Pair - Cisco ASR 5000 Series Administration Manual

SSH Client Login to External Servers

Generating SSH Client Key Pair

You use commands in the SSH Client Configuration mode to specify a private key and generate the SSH
client key pair.
Step 1 Enter the SSH client configuration mode.
host_name
[local]
host_name
[local]
Step 2
Enter SSH private key information and key type.
host_name
[local]
host_name
[local]
key private_key_string specifies a private key value as an alphanumeric string of 1 through 4499 characters.
length key_length specifies the length of the key in bytes as an integer from 0 through 65535.
type v2-rsa specifies the SSH client key type. The only supported SSH client key type is v2-rsa.
Step 3 Generate SSH client key pair.
host_name
[local]
host_name
[local]
type v2-rsa specifies the SSH client key type. The only supported SSH client key type is v2-rsa.
Step 4 Verify that the SSH client key has been generated.
host_name
[local]
Step 5 Exit the SSH Client Configuration mode.
host_name
[local]
host_name
[local]
Pushing an SSH Client Public Key to an External Server
You must push the SSH client public key to an external server to support SSH/SFTP access to that server.
Step 1
From the Exec mode run the push ssh-key command.
host_name
[local]
host_name
[local]
host_name specifies the remote server using its logical host name which must be resolved via DNS lookup. It is expressed
as an alphanumeric string of 1 to 127 characters.
host_ip_address is expressed in IPv4 dotted-decimal or IPv6 colon-separated-hexadecimal notation.
user username specifies a valid username on the external server as an alphanumeric string of 1 to 79 characters.
context context_name specifies a valid context name. The context name is optional. If it is not provided the current
context is used for processing.
ASR 5500 System Administration Guide, StarOS Release 21.4
38
client ssh
(config)#
(config-ssh)#
ssh key private_key_string length key_length [ type v2-rsa ]
(config-ssh)#
(config-ssh)#
ssh generate key [ type v2-rsa ]
(config-ssh)#
(config-ssh)#
do show ssh client key
(config-ssh)#
exit
(config-ssh)#
(config)#
push ssh-key { host_name | host_ip_address } user username [ context context_name ]
#
#
Getting Started