Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 79
Configuration guide
Hide thumbs
Also See for 4215 - Intrusion Detection Sys Sensor:
- Hardware installation manual (74 pages)
Table of Contents
Advertisement
Chapter 4
Initial Configuration Tasks
An SSH authorized key provides better security than passwords if the private key is adequately
Note
safeguarded. The best practice is to create the private key on the same host where it will be used and
store it with a passphrase on a local file system. To minimize password or passphrase prompts, use a key
agent.
To modify an authorized key, you must remove and recreate the entry. Use the no form of the command
Note
to remove the entry. Users can only create and remove their own keys.
To add a key entry to the SSH authorized keys list for the current user, follow these steps:
Step 1
Log in to the CLI.
Add a key to the authorized keys list for the current user:
Step 2
sensor# configure terminal
sensor(config)# ssh authorized-key system1 1023 37
660222729556609833380897067163729433570828686860008172017802434921804214207813035920829509
101701358480525039993932112503147452768378620911189986653716089813147922086044739911341369
642870682319361928148521864094557416306138786468335115835910404940213136954353396163449793
49705016792583146548622146467421997057
sensor(config)#
Verify that the key was added:
Step 3
sensor(config)# exit
sensor# show ssh authorized-keys
system1
sensor#
Step 4
View the key for a specific ID:
sensor# show ssh authorized-keys system1
1023 37 660222729556609833380897067163729433570828686860008172017802434921804214
20781303592082950910170135848052503999393211250314745276837862091118998665371608
98131479220860447399113413696428706823193619281485218640945574163061387864683351
1583591040494021313695435339616344979349705016792583146548622146467421997057
sensor#
Remove an entry from the list of SSH authorized keys:
Step 5
sensor# configure terminal
sensor(config)# no ssh authorized-key system1
The key is removed from the SSH authorized keys list.
Verify the entry was removed:
Step 6
sensor(config)# exit
sensor# show ssh authorized-keys
The key system1 no longer appears in the list:
If you type the former id, you receive an error message:
sensor# show ssh authorized-keys system1
Error: Requested id does not exist for the current user.
sensor#
78-16527-01
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Configuring SSH
4-33
Advertisement
Table of Contents
Troubleshooting
