Secure Shell Commands

This section describes the commands you use to configure Secure Shell (SSH) access to the switch. Use SSH to access the switch from a remote management host.

NOTE: The system allows a maximum of 5 SSH sessions.

ip ssh

Use this command to enable SSH access to the system. (This command is the short form of the ip ssh server enable command.)

• Default: disabled
• Format: ip ssh
• Mode: Privileged EXEC

ip ssh protocol

This command is used to set or remove protocol levels (or versions) for SSH. Either SSH1 (1), SSH2 (2), or both SSH 1 and SSH 2 (1 and 2) can be set.

• Default: 1 and 2
• Format: ip ssh protocol [1] [2]
• Mode: Privileged EXEC

ip ssh server enable

This command enables the IP secure shell server. No new SSH connections are allowed, but the existing SSH connections continue to work until timed-out or logged-out.

• Default: disabled
• Format: ip ssh server enable
• Mode: Privileged EXEC

no ip ssh server enable

This command disables the IP secure shell server.

• Format: no ip ssh server enable
• Mode: Privileged EXEC

sshcon maxsessions

This command specifies the maximum number of SSH connection sessions that can be established. A value of 0 indicates that no ssh connection can be established. The range is 0 to 5.

• Default: 5
• Format: sshcon maxsessions <0-5>
• Mode: Privileged EXEC

no sshcon maxsessions

This command sets the maximum number of allowed SSH connection sessions to the default value.

• Format: no sshcon maxsessions
• Mode: Privileged EXEC

sshcon timeout

This command sets the SSH connection session timeout value, in minutes. A session is active as long as the session has been idle for the value set. The time is a decimal value from 1 to 160. Changing the timeout value for active sessions does not become effective until the session is re accessed. Also, any keystroke activates the new timeout duration.

• Default: 5
• Format: sshcon timeout <1-160>
• Mode: Privileged EXEC

no sshcon timeout

This command sets the SSH connection session timeout value, in minutes, to the default. Changing the timeout value for active sessions does not become effective until the session is re accessed. Also, any keystroke activates the new timeout duration.

• Format: no sshcon timeout
• Mode: Privileged EXEC

show ip ssh

This command displays the ssh settings.

• Format: show ip ssh
• Mode: Privileged EXEC

The display parameters for above command are:

• Administrative Mode: This field indicates whether the administrative mode of SSH is enabled or disabled. Protocol Level The protocol level may have the values of version 1, version 2 or both versions 1 and version 2.
• SSH Sessions Currently Active: The number of SSH sessions currently active.
• Max SSH Sessions Allowed: The maximum number of SSH sessions allowed.
• SSH Timeout: The SSH timeout value in minutes.
• Keys Present: Indicates whether the SSH RSA and DSA key files are present on the device.
• Key Generation in Progress: Indicates whether RSA or DSA key files generation is currently in progress.