cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
406
Views
0
Helpful
6
Replies

config for enabling SSH

saidfrh
Level 1
Level 1

Hi,

The following were added to a Cisco router to enable secure remote access, however the Telnet password is not recognized, thus can not log in to the router. The following is the config. Any suggestions would be appreciated.

ip domain-name yyygroup.com

crypto key gen rsa

1024

ip ssh version 2

ip ssh timeout 60

line vty 0 4

transport input telnet ssh

1 Accepted Solution

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

Hi

You cannot use the line password for access with ssh. You either need to configure a local username/password on the router for use with ssh or setup ssh access via TACACS+/Radius.

Edit - should have said, to create a local username/password

router(config)# username password

HTH

Jon

View solution in original post

6 Replies 6

Jon Marshall
Hall of Fame
Hall of Fame

Hi

You cannot use the line password for access with ssh. You either need to configure a local username/password on the router for use with ssh or setup ssh access via TACACS+/Radius.

Edit - should have said, to create a local username/password

router(config)# username password

HTH

Jon

Thank you.

Jon,

I entered a user name and password. Puttying in to the remote router asks for a password. The above password associated with the username did not work. After using Putty to access the router, the username was not asked. Any suggestion would be appreciated.

Hi

You need to tell the router that you want to use local authentication ie.

router(config)# aaa authentication login default local

Jon

Jon,

Thanks. I selected line authentication option, thus using the Vty passwd to login using SSH/Putty. Do you know how to configure 3Des for encrypting the passwords in the router?

Said

Create the username with the secret keyword rather than password which will encrypt the password using MD5

username privelege secret

IF your IOS does not support the secret option, you can use service password-encryption in the global config which will also encrypt the password. This encryption though is very weak and can be cracked using any available password cracking tools

HTH

Narayan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card