How to get rid of stack and crypto key on a 3750 switch Hi everyone! I got some old Cisco 3750 switches and Id like to install them on another place, but I'd need to get them back to factory default settings (with the last software version though). Started studying for my ICND1 and am I total newb to the Cisco world I purchased a Cisco 3750 -24TS switch and am trying to configure SSH. When I enter the command command #crypto key generate rsa I get the below error: Lab(config)#ip domain-Name EXAMPLE.COM Lab(config)#CRY?% Unrecognized command Lab(config)#CRY Lab(config)#Crypto key generate. Sep 20, 2010 This tutorial demonstrates how to quickly and easily enable SSH on a new Cisco router or switch. This will enable secure terminal sessions to the device without the risks associated with plain.
ContentsIntroduction
This document gives step-by-step instructions to configure Secure Shell (SSH) Version 1 on Catalyst switches running Catalyst OS (CatOS). The version tested is cat6000-supk9.6-1-1c.bin.
Cisco Generate Crypto KeyPrerequisitesRequirements
This table shows the status of SSH support in the switches. Registered users can access these software images by visiting the Software Center.
* Configuration is covered in Configuring Secure Shell on Routers and Switches Running Cisco IOS.
** There is no support for SSH in 12.1E train for Catalyst 4000 running Integrated Cisco IOS Software.
Refer to Encryption Software Export Distribution Authorization Form in order to apply for 3DES.
This document assumes that authentication works prior to implementation of SSH (through the Telnet password, TACACS+) or RADIUS. SSH with Kerberos is not supported prior to the implementation of SSH.
Components Used
This document addresses only the Catalyst 2948G, Catalyst 2980G, Catalyst 4000/4500 series, Catalyst 5000/5500 series, and Catalyst 6000/6500 series running the CatOS K9 image. For more details, refer to the Requirements section of this document.
The information presented in this document was created from devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If you are working in a live network, ensure that you understand the potential impact of any command before using it.
Conventions
For more information on document conventions, see the Cisco Technical Tips Conventions.
Network DiagramSwitch ConfigurationDisabling SSH
In some situations it may be neccessary to disable SSH on the switch. You must verify whether SSH is configured on the switch and if so, disable it. Fable 3 activation key generator.
To verify if SSH has been configured on the switch, issue the show crypto key command. If the output displays the RSA key, then SSH has been configured and enabled on the switch. An example is shown here.
To remove the crypto key, issue the clear crypto key rsa command to disable SSH on the switch. An example is shown here.
debug in the Catalyst
To turn on debugs, issue the set trace ssh 4 command.
To turn off debugs, issue the set trace ssh 0 command.
debug Command Examples of a Good ConnectionSolaris to Catalyst, Triple Data Encryption Standard (3DES), Telnet PasswordSolarisCatalystPC to Catalyst, 3DES, Telnet PasswordCatalystSolaris to Catalyst, 3DES, Authentication, Authorization, and Accounting (AAA) AuthenticationSolarisCatalystdebug Command Examples of What Can Go WrongCatalyst debug with Client Attempting [unsupported] Blowfish CipherCatalyst debug with Bad Telnet PasswordCatalyst debug with Bad AAA AuthenticationCrypto Key GenerateTroubleshoot![]()
This section deals with different troubleshooting scenarios related to SSH configuration on Cisco switches.
Cannot Connect to Switch through SSH
Problem:
Cannot connect to the switch using SSH.
The debug ip ssh command shows this output:
Solution:
This problem occurs because of either of these reasons:
The workarounds for this problem are:
In order to resolve this problem forever, upgrade the IOS software to any of the versions in which this problem is fixed.
A bug has been filed about this issue. For more information, refer to Cisco bug ID CSCtc41114 (registered customers only) .
Related InformationComments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |