Upstream/lab-docu
1
0
Fork 0
mirror of https://github.com/Fohdeesha/lab-docu.git synced 2025-01-20 18:21:19 +01:00
Code Issues Projects Releases Wiki Activity

disable interactive auth for SSH configs

Browse Source 
even with pass auth disabled, switch was still allowing password logins. thanks jasonwc
This commit is contained in:
Jon Sands 2021-12-15 18:12:20 -05:00
parent d8d9e9091b
commit 379494b584
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docs/icx6xxx-adv.md
View File

@ -48,6 +48,7 @@ If you have followed the above to set up authentication, and also wish to disabl
```
ip ssh key-authentication yes
ip ssh password-authentication no
ip ssh interactive-authentication no
```
Now we have to generate our key pair with [puttygen](https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html) on windows or ```ssh-keygen -t rsa``` on linux. The default settings of RSA @ 2048 bits works without issue. Generate the pair and save out both the public and private key.
>The ICX6xxx series do *not* support 4096 bit keys - when using `ssh-keygen` or `puttygen` etc, you must create 2048 bit keys.

1
docs/icx7xxx-adv.md
View File

@ -53,6 +53,7 @@ If you have followed the above to set up authentication, and also wish to disabl
```
ip ssh key-authentication yes
ip ssh password-authentication no
ip ssh interactive-authentication no
```
Now we have to generate our key pair with [puttygen](https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html) on windows or ```ssh-keygen -t rsa``` on linux. The default settings of RSA @ 2048 bits works without issue. Generate the pair and save out both the public and private key.