6-17
Configuring Secure Shell (SSH)
Configuring the Switch for SSH Operation
To disable SSH on the switch, do either of the following:
■ Execute no ip ssh.
■ Zeroize the switch’s existing key pair. (page 6-11).
Syntax: [no] ip ssh
Enables or disables SSH on the switch.
[cipher <cipher-type>]
Specify a cipher type to use for connection.
Valid types are:
• aes128-cbc
• 3des-cbc
• aes192-cbc
• aes256-cbc
• rijndael-cbc@lysator.liu.se
• aes128-ctr
• aes192-ctr
• aes256-ctr
Default: All cipher types are available.
Use the no form of the command to disable a cipher type.
[filetransfer]
Enable/disable secure file transfer capability. SCP and SFTP
secure file transfer will not function unless SSH is also
enabled.
[ip-version <4|6|4or6>]
Select the IP mode to run in. The mode “ip-version 4” only
accepts connections from IPv4 clients. The mode “ip-version
6” only accepts connections from IPv6 clients. The mode “ip-
version 4or6” accepts connections from both IPv4 and IPv6
clients.
Default: ip-version 4or6
