beautypg.com

Enabling empty password logins, Changing the tcp port used for ssh, Loading a public key file – Brocade Virtual ADX Administration Guide (Supporting ADX v03.1.00) User Manual

Page 23

background image

Brocade Virtual ADX Administration Guide

11

53-1003249-01

Configuring SSH

1

The yes option enables SSH password authentication.

Enabling empty password logins

By default, empty password logins are not allowed. This means that users with an SSH client are
always prompted for a password when they log into the device. To gain access to the device, each
user must have a user name and password.

If you enable empty password logins, users are not prompted for a password when they log in. Any
user with an SSH client can log in without being prompted for a password.

To enable empty password logins, enter the following command.

Virtual ADX(config)#ip ssh permit-empty-passwd yes

Syntax: [no] ip ssh permit-empty-passwd no | yes

The yes option enables SSH empty password login.

Changing the TCP port used for SSH

By default, SSH traffic occurs on TCP port 22. To change the TCP port used for SSH, enter the
following command.

Virtual ADX(config)#ip ssh port 2200

Syntax: [no] ip ssh port number

The number variable specifies a valid TCP port number.

Note that if you change the default SSH port number, you must configure SSH clients to connect to
the new port. Also, you should be careful not to assign SSH to a port that is used by another
service. If you change the SSH port number, We recommend that you change it to a port number
greater than 1024.

Loading a public key file

NOTE

SSH public key authentication supports only DSA keys. RSA keys are not supported.

To cause a public key file to be loaded onto the device, enter commands such as the following.

Virtual ADX(config)#ip ssh pub-key-file tftp 192.168.1.234 pkeys.txt

Virtual ADX(config)#ip ssh pub-key-file reload

Virtual ADX(config)#ip ssh pub-key-file file system

Virtual ADX(config)#write memory

Syntax: [no] ip ssh pub-key-file tftp tftp-server-ip-addr filename

Syntax: [no] ip ssh pub-key-file reload

Syntax: [no] ip ssh pub-key-file file system

The tftp tftp-server-ip-addr filename parameter causes a public key file called filename to be
loaded from a TFTP server each time the Brocade Virtual ADX is booted.

The reload keyword reloads the public keys from the file on the TFTP server.