do anyone know if there is a SSH module, or any secure module that provides SSH for Cisco 6500 series of routers/switches?!
SSH on the 6500 series is a software feature, so the best thing to do is use the Cisco Feature Navigator to select a software image with SSH support and install that.
-
So a hardware module is not available for 6500 series!? I mean any module that can provide us with SSH for secure remote control of device. – upitnik Dec 12 '13 at 9:09
-
Why would you need a hardware module for that? It's a software feature like SSH running on any OS like Windows, Linux whatever. This is for management. If you are talking about encrypting user traffic that is something entirely different. – Daniel Dib Dec 12 '13 at 9:25
-
Yes, this is for management. So there is no need for hardware module linecard. Just to find the proper IOS that support SSH – upitnik Dec 12 '13 at 9:49
-
Yes, it's all in the management software, no additional hardware is required. – Teun Vink♦ Dec 12 '13 at 10:17
SSH management is available on pretty much all IOS versions available for enterprise class switches.
Generic setup:
aaa new-model
user foo password 0 foobar
hostname foo
!-- generate SSH key
crypto key generate rsa
!-- key length
1024
!-- specify SSH ver
ip ssh ver 2
!
line vty 0 4
transport input ssh
That's all there is. Then SSH to the management IP and login.
-
1Not entirely true - the hardware has to support a CRYPTO-compatible image for the SSH feature to work. Not all hardware does, but the overwhelming majority does. – John Jensen Dec 12 '13 at 16:50
-
2
-
@connorwa John Jensen is correct, not ALL IOS versions have SSH. Just replace "on all IOS switches" with "on pretty much every IOS image that's out for the 6500". – Ryan Foley Dec 12 '13 at 19:04
-
-
2Actually, not every IOS image has crypto - they make IOS images for export to munitions-controlled countries (i.e. China, Iran, etc.) Look for the string 'k9' in the image name, i.e.
s2t54-ipservicesk9_npe-mz.SPA.151-2.SY1.bin
which means it has the requisite crypto software included. – Will Dennis Dec 12 '13 at 22:57