Cisco Systems 3560X Manual De Usuario
10-45
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-21521-01
Chapter 10 Configuring Switch-Based Authentication
Configuring the Switch for Secure Shell
Note
For complete syntax and usage information for the commands used in this section, see the command
reference for this release and the “Secure Shell Commands” section of the “Other Security Features”
chapter of the Cisco IOS Security Command Reference, Release 12.2 at this URL:
reference for this release and the “Secure Shell Commands” section of the “Other Security Features”
chapter of the Cisco IOS Security Command Reference, Release 12.2 at this URL:
Understanding SSH
SSH is a protocol that provides a secure, remote connection to a device. SSH provides more security for
remote connections than Telnet does by providing strong encryption when a device is authenticated. This
software release supports SSH Version 1 (SSHv1) and SSH Version 2 (SSHv2).
remote connections than Telnet does by providing strong encryption when a device is authenticated. This
software release supports SSH Version 1 (SSHv1) and SSH Version 2 (SSHv2).
This section consists of these topics:
•
•
SSH Servers, Integrated Clients, and Supported Versions
The SSH feature has an SSH server and an SSH integrated client, which are applications that run on the
switch. You can use an SSH client to connect to a switch running the SSH server. The SSH server works
with the SSH client supported in this release and with non-Cisco SSH clients. The SSH client also works
with the SSH server supported in this release and with non-Cisco SSH servers.
switch. You can use an SSH client to connect to a switch running the SSH server. The SSH server works
with the SSH client supported in this release and with non-Cisco SSH clients. The SSH client also works
with the SSH server supported in this release and with non-Cisco SSH servers.
The switch supports an SSHv1 or an SSHv2 server.
The switch supports an SSHv1 client.
SSH supports the Data Encryption Standard (DES) encryption algorithm, the Triple DES (3DES)
encryption algorithm, and password-based user authentication.
encryption algorithm, and password-based user authentication.
SSH also supports these user authentication methods:
•
TACACS+ (for more information, see the
•
RADIUS (for more information, see the
•
Local authentication and authorization (for more information, see the
)
Note
This software release does not support IP Security (IPSec).