cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
10541
Views
9
Helpful
2
Replies

Cannot use crypto key generate rsa command in config mode

WSCBNETADMIN
Level 1
Level 1

Have Cisco 1841 router. Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.3(8)T7, RELEASE SOFTWARE (fc3).

Want to set up SSH for secure telnet sessions. In global config mode: [Router(config)# ] when I enter "crypto key generate rsa" command, I get an error. cr? command does not list crypto as an available command.

What is the issue? Is it a security issue? For example, might I need something like "aaa authorization exec local" to allow this configuration step?

Thanks.

2 Replies 2

michael.leblanc
Level 4
Level 4

Although I have not confirmed this, I would be inclined to believe that the IPBASE image for your platform likely does not support "crypto".

I would hit the Cisco web site for confirmation before spending any more effort on the CLI.

Jim

Michael is quite right. The IPBASE feature set in 12.3T does not support crypto and will not allow you to generate a crypto key. To generate a key you do need a feature set that supports crypto. This is generally indicated by the presence of "k9" in the file name of the image file. According to the Feature Navigator on CCO the feature sets in 12.3T would be adventerprisek9, advipservicesk9, advsecurityk9, entservicesk9, and spservicesk9. If you went to 12.4 mainline there is, in fact, an IPBASE feature set that has support for crypto.

HTH

Rick

HTH

Rick
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: