chris bryant ccna 200 301

chris bryant ccna 200 301.alina(config)# ip domain-name deal.comalina(config)# ip ssh version 2Please create RSA keys to enable SSH. alina(config)# crypto key generate rsa The name for the keys will be: alina.deal.com Choose the size of the key Choose the size of the key modulus in the yourrange of 360 to 2048 for keyChoosing a may take amodulus greater than 512 in the few minutes.How many bits modulus [512] : 1024 % Generating 1024 bit RSA keys, keys will be non-exportable... [OK] *Oct 5 16:48:23.455: %SSH-5-ENABLED: SSH 2.0 has been enabled alina(config)# line vty 0 15 alina(config-line)# login local alina(config-line)# transport input ssh alina(config-line)# exitThe line command transportinput allows remote access to the IOS only through the specified protocol/application.In this example, the execution of the command crypto keygenerate rsa requires you to specify the RSA key length. The longer the key, the more secure the connection; the maximum key length is 2048 bits. However, the longer the key, the longer it takes for the IOS device to generate it. On today's IOS devices, it should not take too long to generate the key: I generated a 2048-bit key on my 1841 router in about 30 seconds.Another thing to note about the above configuration is the two commands to configure the VTY. The command login local specifies to use the local database (username and password configured by the command username) for authentication: this causes the IOS device to prompt for a username and password for authentication. If the local parameter is not specified, the IOS device will only prompt for a password (the password configured on the line using the command password) for authentication, as discussed in Chapter 10. SSH requires a username and password for authentication. The command transportinput ssh specifies that access to the VTY is allowed only through SSH; by default, remote access to the VTY by any means (including Telnet) is allowed.To use SSH to access IOS devices, you must use a local username database or authentication server (AAA) for authentication $ Also, PuTTY (not HyperTerminal) is typically used as a console access program, Telnet client, and SSH client. These little programs are great, provide all the functionality needed, and are free!Authentication Target 16.05