SSH protokolini sozlashdan oldin kommutatorda tugunning maxsus nomini va
tarmoq ulanishining mos keluvchi ko`rsatkichlarini ko‘rsatish lozim.
1 – qadam. SSH protokolini borligini tekshirish
SSH protokoli
borligini bilish uchun
show ip ssh
buyrug‘i beriladi. Agar
kommutatorda kriptografik funksiyani qo‘llab quvvatlovchi IOS bo‘lmasa, bu
buyruq ishlamaydi.
2 – qadam. IP domenni sozlash
Tarmoqning IP domenini global
konfiguratsiya rejimida
ip domain-name
domen nomi
yordamida ko‘rsating.
1.4-rasm.
Lokal tarmoq qurish
Switch#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#hostname tatu_sw1
tatu_sw1(config)#ip domain name tatu
tatu_sw1(config)#crypto key generate rsa
The name for the keys will be: tatu_sw1.tatu
Choose the size of the key modulus in the range of 360 to 2048 for your
General Purpose Keys. Choosing a key modulus greater than 512 may take
a few minutes.
How many bits in the modulus [512]: 512
% Generating 512 bit
RSA keys, keys will be non-exportable...[OK]
tatu_sw1(config)#ip ssh version 2
*мар 1 0:24:59.72: RSA key size needs to be at least 768 bits for ssh version 2
*мар 1 0:24:59.72: %SSH-5-ENABLED: SSH 1.5 has
been enabled
Please create RSA keys (of at least 768 bits size) to enable SSH v2.
tatu_sw1(config)#line vty 0
tatu_sw1(config-line)#transport input ssh
tatu_sw1(config-line)#username admin secret 12345
tatu_sw1(config)#line vty 0
tatu_sw1(config-line)#login local
tatu_sw1(config-line)#do wr
Building configuration...
[OK]