Users Guide

Usage
Information
Before you use the command, locate the public keys on a remote client in the ~/.ssh/id_rsa.pub file.
Create a text file and copy the SSH public keys on the remote client into the file. Enter each public key on
a separate line. Download the file to your home OS10 directory.
NOTE: Entering the command when an SSH key file is not present has no effect and results in a
silent failure. SSH password-less login is not enabled.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.1.0. Also
supported in SmartFabric mode starting in release 10.5.0.1.
The no version of the command removes the SSH password-less configuration for the specified user
name.
Example
OS10(config)# username user10 sshkey filename /test_file.txt
OS10(config)# do show running-configuration users
username admin password
$6$q9QBeYjZ$jfxzVqGhkxX3smxJSH9DDz7/3OJc6m5wjF8nnLD
7/VKx8SloIhp4NoGZs0I/UNwh8WVuxwfd9q4pWIgNs5BKH. role sysadmin
username user10 password
$6$rounds=656000$G10VRFTJB291ekwo$iTGf0zd4bTUcBBpI
Vsbr6oStnUZMydN5lDs4WE6G3XHEtWbcKrGTeAo1wEF0cenEgRRPzi3SMmYyzAHCCC8wS0
role
sysadmin
username user10 sshkey filename /test_file.txt
Supported
Releases
10.4.1.0 or later
crypto ssh-key generate
Regenerates the public keys used in SSH authentication.
Syntax
crypto ssh-key generate {rsa bits | ecdsa bits | ed25519}
Parameters
● rsa bits — Regenerates the RSA key with the specified bit size: 2048, 3072, or 4096; default
2048.
● ecdsa bits — Regenerates the ECDSA key with the specified bit size: 256, 384, or 521; default
256.
● ed25519 — Regenerates the Ed25519 key with the default bit size.
Default The SSH server uses default public key lengths for client authentication:
● RSA key: 2048 bits
● ECDSA key : 256 bits
● Ed25519 key: 256 bits
Command Mode EXEC
Usage
Information
If necessary, you can regenerate the public keys used by the SSH server with a customized bit size. You
cannot change the default size of the Ed25519 key. The crypto ssh-key generate command is
available only to the sysadmin and secadmin roles.
Example
OS10# crypto ssh-key generate rsa 4096
Host key already exists. Overwrite [confirm yes/no]:yes
Generated 4096-bit RSA key
OS10#
Supported
Releases
10.4.1.0 or later
Security 1155