Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IOS SSH AAA help!!

Hi All,

I have this config:

aaa authentication login default local line enable

aaa authorization console

aaa authorization exec default local

aaa authorization network default local

line vty 0 4

password Gr834!

transport preferred ssh

transport input ssh

transport output ssh

then create username "admin" with privilege 15. But I can't login to SSH with this username and password? I've already generated public key on the router.

any idea would be very appreciated.

thanks

Alex

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: IOS SSH AAA help!!

try this:

username cisco password cisco

enable secret cisco

ip domain-name nsp.org

crypto key genrete rsa 1024

ip ssh version 2

line vty 0 4

transport input all

exit

4 REPLIES
New Member

Re: IOS SSH AAA help!!

try this:

username cisco password cisco

enable secret cisco

ip domain-name nsp.org

crypto key genrete rsa 1024

ip ssh version 2

line vty 0 4

transport input all

exit

New Member

Re: IOS SSH AAA help!!

crypto key generate rsa 1024

New Member

Re: IOS SSH AAA help!!

SSH normally works with minimum 1024.

Bronze

Re: IOS SSH AAA help!!

Here is a complete ssh config that doesn't need a hostname or domain name:

crypto key gen rsa gen label SSH_Keys mod 1024

ip ssh ver 2

ip ssh authentication-retries 3

ip ssh time-out 90

ip ssh source-interface loopback0

username test secret p@ssw0rd

enable secret s3cr3tPassw0rd!

aaa new-model

aaa authentication login default local

aaa authentication enable default enable

line vty 0 4

transport input ssh

I would recommend AGAINST creating level 15 usernames.

174
Views
0
Helpful
4
Replies
CreatePlease login to create content