Oh, Clayton is right.  The IOS I am running is 12.1.7 with 3DES.
However, my previous answer is correct that you need to use putty or
mindterm ssh clients because Teraterm doesn't work with Cisco SSH in
version 12.1.7.  I learned it the hard way.

>From: "Clayton Price" <[EMAIL PROTECTED]>
>Reply-To: "Clayton Price" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Secure telnet to your router using SSH
>Date: Sat, 31 Mar 2001 11:05:45 -0600
>
>I'm not sure if that release supports ssh. It might have to be one of the
>12.1(x)T releases.
>
>Clayton
>
>""Groupstudy.com"" <[EMAIL PROTECTED]> wrote in message
>9a53ff$1pr$[EMAIL PROTECTED]">news:9a53ff$1pr$[EMAIL PROTECTED]...
> > Thanks, Clayton,  But I could not connet to the router using Tera Term 
>Pro
> > with SSH.  I know the Tera Term is working because I have been using it 
>to
> > connect to my PIX through SSH.  My router running Version 12.0(7)XK1 
>with
> > DES support.
> > I did the following.
> >
> > > Router(config)# hostname hostname
> > > Router(config)# ip domain-name domainname
> > > Router(config)# crypto key generate rsa
> > and
> > > > line vty 0 4
> > > > transport input all
> >
> > What do you think is the problem.
> >
> > Thanks
> >
> > Ruihai
> > ""Clayton Price"" <[EMAIL PROTECTED]> wrote in message
> > 9a4033$lvh$[EMAIL PROTECTED]">news:9a4033$lvh$[EMAIL PROTECTED]...
> > > Depending on the platform I think you left out some vital commands.
> > >
> > > Router(config)# hostname hostname
> > > Router(config)# ip domain-name domainname
> > > Router(config)# crypto key generate rsa
> > >
> > >
> >
>http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121
> > > t/121t1/sshv1.htm#xtocid265436
> > >
> > > Clayton Price
> > >
> > > ""Sean Young"" <[EMAIL PROTECTED]> wrote in message
> > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > > The answer is a very easy one.  You need to download Cisco IOS with
> > > > either DES or 3DES.  Furthermore, you will need to do this:
> > > >
> > > > line vty 0 4
> > > > transport input ssh
> > > >
> > > > That will do the trick.  If you want to be even more secure, 
>implement
> > > > TACACS server instead of local account.  By the way "transport input
> > ssh"
> > > > essentially cut-off telnet to your router.  I've heard of newbies in
> > > > this group suggesting of implementing access-list to prevent.  
>That's
> > not
> > > > the right way to do it.  Another thing, remember Cisco IOS only
>supports
> > > > SSH version 1 and keep in mind that SSH 1 does have security
> > > > vulnerabilities.  F___ those bastards at Cisco for not implementing
>SSH2
> > > > on Cisco IOS.
> > > >
> > > >
> > > >
> > > >
> > > > >From: "Groupstudy.com" <[EMAIL PROTECTED]>
> > > > >Reply-To: "Groupstudy.com" <[EMAIL PROTECTED]>
> > > > >To: [EMAIL PROTECTED]
> > > > >Subject: Secure telnet to your router using SSH
> > > > >Date: Fri, 30 Mar 2001 18:24:02 -0500
> > > > >
> > > > >I have been using SSH to secure my telnet connection toPIX.  Does
> > anyone
> > > > >know how to do the samething to IOS router?
> > > > >
> > > > >Thanks
> > > > >
> > > > >Ruihai
> > > > _________________________________________________________________
> > > > Get your FREE download of MSN Explorer at http://explorer.msn.com
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to