enabling SSH for line password

[raju]

Hi,

How to enable the SSH for the line password in 2800 series Router ?.

Regards,

Raju

[pkhatri]

Do the following:

Configure a host name for your router:

hostname

Configures a host domain for your router:

ip domain-name

Enable the SSH server for local and remote authentication on the router:

crypto key generate rsa

And then do the following ( if using tacacs):

aaa authentication login default tacacs+ tacacs-server host port

tacacs-server key

Note: you can also use local authentication in plac of tacacs using the following:

username myuser password mypassword

aaa authentication login default local

hope that helps - pls rate the post if it does.

Regards,

Paresh

[pkhatri]

Hi,

One thing I neglected to mention is that you will need an IOS image that supports encryption (DES/3DES)...

Paresh

[raju]

Thanks Paresh. I'll use local authentication only (no RADIUS or TACACS+). I'm going to enable SSH in production Router. Will it cause any problem (packet drop etcc... for a moment ) while enabling SSH feature.

Thanks

[pkhatri]

Hi Raju,

While it should not theoretically cause a hit, these things are always quite unpredictable. Therefore, you should take appropriate precautions before you do so.

Do you have a lab router where you can try this out first ?

Hope that helps - pls rate posts that help.

Regards,

Paresh