在1811上开启SSH2服务

考虑到需要通过公网登录路由器，因此通过如下命令配置：

conf t

line vty 0 4

password xxxxxxxxxx

login

transport input ssh

用putty能成功ssh登录。接着用SecureCRT登录，提示目的地址ssh为version1。这才发现需要做额外配置才能开启SSH2。配置过程记录如下：

router(config)#username sshuser password xxxxxx

router(config)#hostname router_host_name
router(config)#ip domain-name domain.com
router(config)#crypto key generate rsa
The name for the keys will be: router_host_name.domain.com
Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose Keys. Choosing a key modulus greater than 512 may take a few minutes.

How many bits in the modulus [512]: 2048
% Generating 2048 bit RSA keys, keys will be non-exportable...[OK]

Please create RSA keys (of atleast 768 bits size) to enable SSH v2.
router(config)#ip ssh rsa  keypair-name  router_host_name
router(config)#ip ssh version 2 
*May  2 12:09:20.155: %SSH-5-ENABLED: SSH 2.0 has been enabled

 

接下来查看ssh2设置情况：

router#sh ip ssh

SSH Enabled - version 2.0
Authentication timeout: 120 secs; Authentication retries: 3

 

再查看连接情况：

router#show ssh