networking-forum.com
Community BlogCommunity Wiki * Register  * Search  * Login
View unanswered postsView active topics

All times are UTC - 6 hours [ DST ]



Post new topic Reply to topic  [ 10 posts ] 
Author Message
 Post subject: ISCW labs #7 - SSH
PostPosted: Fri May 01, 2009 10:25 am 
Offline
CCIE #38070
CCIE #38070
User avatar

Joined: Wed Jun 18, 2008 7:49 am
Posts: 12425
Location: London, UK
Certs: CCIE ,CC-NP/IP, JNCIP-SP, JNCIS-ENT, BC-/SPNE/NP
Lab's 1 - 3 plus the topology I've used are in this thread: viewtopic.php?f=40&t=11183

A quick simple one, but you'll still need to know it for the exam and normal networks


Attachments:
SSH.jpg
SSH.jpg [ 15.94 KiB | Viewed 1632 times ]

_________________
www.mellowd.co.uk/ccie/
Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Wed May 06, 2009 7:39 pm 
Offline
New Member
New Member

Joined: Wed May 06, 2009 7:35 pm
Posts: 6
cool, I need to memorize how to disable telnet and leave only ssh.
and thanks for the link.


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Mon Jun 08, 2009 2:03 am 
Offline
New Member
New Member

Joined: Fri May 29, 2009 4:56 am
Posts: 20
It should be something linke

crypto key generate rsa --> In order to create the ssh certificate

and then

line vty 0 4
transport input ssh

you can also change ssh version. But this is ok.

The banner should be

banner motd $$THIS IS MY ROUTER$$

kind regards


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Tue Jun 09, 2009 9:48 am 
Offline
Senior Member
Senior Member
User avatar

Joined: Fri Apr 11, 2008 8:48 am
Posts: 361
Location: New York
luismg wrote:
It should be something linke

crypto key generate rsa --> In order to create the ssh certificate

and then

line vty 0 4
transport input ssh

you can also change ssh version. But this is ok.

The banner should be

banner motd $$THIS IS MY ROUTER$$

kind regards


you need to configure a username//password and put it on a domain for you to be able to put in the "crypto key generate rsa" command!


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Sun Jun 14, 2009 1:42 am 
Offline
Junior Member
Junior Member

Joined: Thu Jun 04, 2009 10:29 pm
Posts: 85
Location: Fresno, Ca
Wouldn't disabling telnet just be easier to do

router(config)# line vty 0 4
router(config-line)# login
router(config-line)# exit

With no password telnet is disabled... right?


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Mon Jun 15, 2009 10:10 am 
Offline
Senior Member
Senior Member
User avatar

Joined: Fri Apr 11, 2008 8:48 am
Posts: 361
Location: New York
Allenwr wrote:
Wouldn't disabling telnet just be easier to do

router(config)# line vty 0 4
router(config-line)# login
router(config-line)# exit

With no password telnet is disabled... right?


router(config)# line vty 0 4
router(config-line)# transport input ssh
router(config-line)# exit

This way you enable ssh only on those vty lines


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Tue Jun 16, 2009 12:46 am 
Offline
Junior Member
Junior Member

Joined: Thu Jun 04, 2009 10:29 pm
Posts: 85
Location: Fresno, Ca
Well, I learned something, I figured SSH and Telnet were different animals.


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Tue Jun 16, 2009 10:45 am 
Offline
Senior Member
Senior Member
User avatar

Joined: Fri Apr 11, 2008 8:48 am
Posts: 361
Location: New York
Allenwr wrote:
Well, I learned something, I figured SSH and Telnet were different animals.


They are different animals that serve the same purpose. But telnet should never be enabled as all the traffic can be seen, as opposed to SSH where its encrypted!


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Thu Jun 18, 2009 1:50 am 
Offline
Junior Member
Junior Member

Joined: Thu Jun 04, 2009 10:29 pm
Posts: 85
Location: Fresno, Ca
I didn't say what I meant correctly, you seemed to have set up SSH in the telnet "line" on the router console, that is what I didn't get. Bah, I can't explain it, point is I learned something and I thank you for the knowledge.


Top
 Profile  
 
 Post subject: Re: ISCW labs #7 - SSH
PostPosted: Sat Jun 20, 2009 1:06 pm 
Offline
Post Whore
Post Whore
User avatar

Joined: Wed Jun 17, 2009 11:28 am
Posts: 1579
Location: Longford Ireland
Certs: BSc computer network administration, CCNP, MCSE
Allenwr wrote:
I didn't say what I meant correctly, you seemed to have set up SSH in the telnet "line" on the router console, that is what I didn't get. Bah, I can't explain it, point is I learned something and I thank you for the knowledge.



As far as I am aware VTY are not telnet lines simply terminal lines. So what you do is change the method/protocol on those lines, hence input ssh and not telnet.

_________________
Good Luck,

David


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC - 6 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group