Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cannot use crypto key generate rsa command in config mode

Have Cisco 1841 router. Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.3(8)T7, RELEASE SOFTWARE (fc3).

Want to set up SSH for secure telnet sessions. In global config mode: [Router(config)# ] when I enter "crypto key generate rsa" command, I get an error. cr? command does not list crypto as an available command.

What is the issue? Is it a security issue? For example, might I need something like "aaa authorization exec local" to allow this configuration step?

Thanks.

2 REPLIES

Re: Cannot use crypto key generate rsa command in config mode

Although I have not confirmed this, I would be inclined to believe that the IPBASE image for your platform likely does not support "crypto".

I would hit the Cisco web site for confirmation before spending any more effort on the CLI.

Hall of Fame Super Silver

Re: Cannot use crypto key generate rsa command in config mode

Jim

Michael is quite right. The IPBASE feature set in 12.3T does not support crypto and will not allow you to generate a crypto key. To generate a key you do need a feature set that supports crypto. This is generally indicated by the presence of "k9" in the file name of the image file. According to the Feature Navigator on CCO the feature sets in 12.3T would be adventerprisek9, advipservicesk9, advsecurityk9, entservicesk9, and spservicesk9. If you went to 12.4 mainline there is, in fact, an IPBASE feature set that has support for crypto.

HTH

Rick

5471
Views
9
Helpful
2
Replies
CreatePlease login to create content