3

do anyone know if there is a SSH module, or any secure module that provides SSH for Cisco 6500 series of routers/switches?!

Improve this question

2 Answers 2

Reset to default
6

SSH on the 6500 series is a software feature, so the best thing to do is use the Cisco Feature Navigator to select a software image with SSH support and install that.

Improve this answer
4
  • So a hardware module is not available for 6500 series!? I mean any module that can provide us with SSH for secure remote control of device.
    – upitnik
    Commented Dec 12, 2013 at 9:09
  • Why would you need a hardware module for that? It's a software feature like SSH running on any OS like Windows, Linux whatever. This is for management. If you are talking about encrypting user traffic that is something entirely different.
    – Daniel Dib
    Commented Dec 12, 2013 at 9:25
  • Yes, this is for management. So there is no need for hardware module linecard. Just to find the proper IOS that support SSH
    – upitnik
    Commented Dec 12, 2013 at 9:49
  • Yes, it's all in the management software, no additional hardware is required.
    – Teun Vink
    Commented Dec 12, 2013 at 10:17
0

SSH management is available on pretty much all IOS versions available for enterprise class switches.

Generic setup:

aaa new-model
user foo password 0 foobar
hostname foo
!-- generate SSH key
crypto key generate rsa
!-- key length
1024
!-- specify SSH ver
ip ssh ver 2
!
line vty 0 4
transport input ssh

That's all there is. Then SSH to the management IP and login.

Improve this answer
6
  • 1
    Not entirely true - the hardware has to support a CRYPTO-compatible image for the SSH feature to work. Not all hardware does, but the overwhelming majority does.
    – John Jensen
    Commented Dec 12, 2013 at 16:50
  • 2
    He specified a 6500. That's a big boy that supports CRYPTO.
    – connorwa
    Commented Dec 12, 2013 at 16:52
  • @connorwa John Jensen is correct, not ALL IOS versions have SSH. Just replace "on all IOS switches" with "on pretty much every IOS image that's out for the 6500".
    – Ryan Foley
    Commented Dec 12, 2013 at 19:04
  • Okay, that's a fair cop. Done.
    – connorwa
    Commented Dec 12, 2013 at 19:56
  • 2
    Actually, not every IOS image has crypto - they make IOS images for export to munitions-controlled countries (i.e. China, Iran, etc.) Look for the string 'k9' in the image name, i.e. s2t54-ipservicesk9_npe-mz.SPA.151-2.SY1.bin which means it has the requisite crypto software included.
    – Will Dennis
    Commented Dec 12, 2013 at 22:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.