Ssh on Details... https://www.deepreflect.net/tags/ssh/ Recent content in Ssh on Details... Hugo en-US Copyright © 2003 - 2026 Leonardo Rizzi Tue, 30 Jun 2026 03:28:29 +0200 Cisco ASA - Enable SSH https://www.deepreflect.net/2009/08/06/cisco-asa-enable-ssh/ Thu, 06 Aug 2009 00:32:57 +0000 http://blog.deepreflect.net/?p=676 <p>If you have tried to setup SSH access on a new ASA, it might not have worked the way you wanted. That is because the RSA keys need to be generated first. To do that:</p> <p>from configure terminal:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-fallback" data-lang="fallback"><span style="display:flex;"><span>fw01/act(config)# crypto key generate rsaINFO: The name for the keys will be: </span></span><span style="display:flex;"><span>Keypair generation process begin. Please wait… </span></span></code></pre></div><p>And then configure SSH to be allowed from the inside interface:</p> <p><code>fw01/act(config)# ssh (inser your ip) (insert your netmask) outside</code></p> If you have tried to setup SSH access on a new ASA, it might not have worked the way you wanted. That is because the RSA keys need to be generated first. To do that:

from configure terminal:

fw01/act(config)# crypto key generate rsaINFO: The name for the keys will be:
Keypair generation process begin. Please wait…

And then configure SSH to be allowed from the inside interface:

fw01/act(config)# ssh (inser your ip) (insert your netmask) outside

Now you can configure AAA and setup your own username.

First, a username needs to be created:

fw01/act(config)# username leonardo password mypassword privilege 15

And then configure AAA:

fw01/act(config)# aaa authentication ssh console LOCAL

]]> Sorry, I don't know anything about your "xterm-color" terminal. https://www.deepreflect.net/2008/11/24/sorry-i-dont-know-anything-about-your-xterm-color-terminal/ Mon, 24 Nov 2008 02:58:00 +0000 http://blog.deepreflect.net/?p=335 <p>Oggi durante una serie di comandi con un senso ben preciso Solaris mi ha parlato in questo modo:</p> <p><code>Sorry, I don't know anything about your &quot;xterm-color&quot; terminal.</code></p> <p>La perplessità generale mi ha fatto lanciare questo comando:</p> <p><code>bash-3.00#  export TERM=vt100</code></p> <p>Ma molto probabilmente sarebbe stato meglio un terminale &ldquo;ansi&rdquo;</p> Oggi durante una serie di comandi con un senso ben preciso Solaris mi ha parlato in questo modo:

Sorry, I don't know anything about your "xterm-color" terminal.

La perplessità generale mi ha fatto lanciare questo comando:

bash-3.00#  export TERM=vt100

Ma molto probabilmente sarebbe stato meglio un terminale “ansi”

]]> Cisco - SSH https://www.deepreflect.net/2008/10/15/cisco-ssh/ Wed, 15 Oct 2008 21:45:30 +0000 http://blog.deepreflect.net/?p=166 <p>Ecco come abilitare, l&rsquo;ssh sugli apparati con cisco con IOS</p> <p>Prima fase configurare un dominio, e generare i certificati, al fine di incrementare la sicurezza consiglio di usare almeno la chiave 768 Bit che permette l&rsquo;uso di SSH v2</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-gdscript3" data-lang="gdscript3"><span style="display:flex;"><span> route_01_no<span style="color:#75715e">#conf t</span> </span></span><span style="display:flex;"><span> Enter configuration commands, one per line<span style="color:#f92672">.</span> End with CNTL<span style="color:#f92672">/</span>Z<span style="color:#f92672">.</span> </span></span><span style="display:flex;"><span> route_01_no(config)<span style="color:#75715e">#ip domain-name stars.deepreflect.net</span> </span></span><span style="display:flex;"><span> route_01_no(config)<span style="color:#75715e">#cry key generate rsa</span> </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> The name <span style="color:#66d9ef">for</span> the keys will be: route_01_no<span style="color:#f92672">.</span>stars<span style="color:#f92672">.</span>deepreflect<span style="color:#f92672">.</span>net </span></span><span style="display:flex;"><span> Choose the size of the key modulus <span style="color:#f92672">in</span> the range of <span style="color:#ae81ff">360</span> to <span style="color:#ae81ff">2048</span> <span style="color:#66d9ef">for</span> your </span></span><span style="display:flex;"><span> General Purpose Keys<span style="color:#f92672">.</span> Choosing a key modulus greater than <span style="color:#ae81ff">512</span> may take </span></span><span style="display:flex;"><span> a few minutes<span style="color:#f92672">.</span> </span></span><span style="display:flex;"><span> </span></span><span style="display:flex;"><span> How many bits <span style="color:#f92672">in</span> the modulus [<span style="color:#ae81ff">512</span>]: <span style="color:#ae81ff">768</span> </span></span><span style="display:flex;"><span> <span style="color:#f92672">%</span> Generating <span style="color:#ae81ff">768</span> bit RSA keys, keys will be non<span style="color:#f92672">-</span>exportable<span style="color:#f92672">...</span>[OK] </span></span></code></pre></div><p>La seconda fase e&rsquo; abilitare il protocollo SSH v2 e abilitare le line vty all&rsquo;accesso:</p> Ecco come abilitare, l’ssh sugli apparati con cisco con IOS

Prima fase configurare un dominio, e generare i certificati, al fine di incrementare la sicurezza consiglio di usare almeno la chiave 768 Bit che permette l’uso di SSH v2

 route_01_no#conf t
 Enter configuration commands, one per line. End with CNTL/Z.
 route_01_no(config)#ip domain-name stars.deepreflect.net
 route_01_no(config)#cry key generate rsa

 The name for the keys will be: route_01_no.stars.deepreflect.net
 Choose the size of the key modulus in the range of 360 to 2048 for your
 General Purpose Keys. Choosing a key modulus greater than 512 may take
 a few minutes.

 How many bits in the modulus [512]: 768
 % Generating 768 bit RSA keys, keys will be non-exportable...[OK]

La seconda fase e’ abilitare il protocollo SSH v2 e abilitare le line vty all’accesso:

 route_01_no(config)#ip ssh version 2
 route_01_no(config)#line vty 0 4
 route_01_no(config-line)# transport input telnet ssh
 route_01_no(config-line)#
 route_01_no(config)#end
 route_01_no#
]]>