Upstream
/
lab-docu
mirror of https://github.com/Fohdeesha/lab-docu.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Compare commits

base: Upstream:ae9eb9ac88f9842fec6259b68d32d1bb874c11c3
Branches Tags
Upstream:master
...
compare: Upstream:292ffa0b289c7a2be5efa775aa360c2ecb2f5fce
Branches Tags
Upstream:master

4 Commits
ae9eb9ac88 ... 292ffa0b28

Author SHA1 Message Date
Jon Sands 292ffa0b28 icx6xxx key info tidying 2024-01-16 04:20:12 -05:00
Jon Sands 9bf146b69f
Merge pull request #41 from ManoftheSea/patch-1 
Update icx6xxx-adv.md ssh config
 2024-01-16 04:12:32 -05:00
Derek LaHousse a25b7353f5 removing suggested but not necessary lines 2023-12-20 09:53:19 -05:00
Derek d68c64a41a
Update icx6xxx-adv.md ssh config 
I've seen a couple questions, one on the STH thread and one on Reddit, where SSH is failing due to the lack of "ssh-rsa" options.  These changes to the documentation should help future beefers.
 2023-12-13 00:14:43 -05:00
1 changed files with 3 additions and 1 deletions
Show Stats Expand all files Collapse all files

4
docs/icx6xxx-adv.md
View File

@ -137,13 +137,15 @@ ip ssh pub-key-file tftp 192.168.1.8 public.key
```
You shouldn't need to be told basic key management if you're following this section, but just in case - copy your private key to the proper location on the *nix machine you'll be SSH'ing from, or if you're on windows, load it using [pageant](https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html). Now when you SSH to the switch, it will authenticate using your private key.
On linux and macOS you'll want to add these lines to your ```~\.ssh\config``` file. IdentitiesOnly is to prevent ssh-agent from offering any other bigger (> 2048) keys first that will terminate the connection negotiation early. IdentityFile will use only this key for this connection. KexAlgorithms sets a key exchange algorithm that the older ICX6xxx series accepts:
On linux and macOS you'll want to add these lines to your ```~\.ssh\config``` file. IdentitiesOnly is to prevent ssh-agent from offering any other bigger (> 2048) keys first that will terminate the connection negotiation early. IdentityFile will use only this key for this connection. KexAlgorithms sets a key exchange algorithm that the older ICX6xxx series accepts. PubkeyAcceptedKeyTypes and HostKeyAlgorithm must be set as well, to match what the older ICX6xxx can offer:
```
Host <switch-ip>
IdentitiesOnly yes
IdentityFile ~/.ssh/private_key
KexAlgorithms +diffie-hellman-group1-sha1
PubkeyAcceptedKeyTypes=+ssh-rsa
HostKeyAlgorithms=+ssh-rsa
```