Quickly Enable SSH on a Cisco Router or Switch

[@joshdieckmann595]

Good stuff. Usually, I have to search for the commands, and find individual articles or posts, detailing these steps in multiple ways, but this was a very handy guide to get the basic SSH/encryption config done, so thanks for that.

[@frikabg]

Me and a collegue of mine spend 3+ hours trying to identify why we can't ssh from ubuntu 20 to cisco switch. THe amount of manuals instructions and issues that people had was 50+ in total... it all come down to the 'aaa new-model' command which wasn't mention anywhere else at any point and this includes the official cisco guides (we worked with 2 switches 2960 and 3560). I hope this helps someone else huge thank you to NHGainesville!

[@fredgaehring2008]

WORKED LIKE A CHARM i truly thank you and others like you that post these great tutorials

[@DonPezet]

It's also worth mentioning that most older routers didn't ship with the encrypting feature set because of US cryptographic export laws. Cisco made it where it was up to the customer to upgrade the router once they received it. New routers are subject to the newer laws which don't have those limitations and as a result usually do ship with the encrypting feature set.

[@atadjs]

how great is this explanation, still perfect in 2022

[@josephmcshane4430]

Can't understand 34 thumbs down. Good solid, understandable advise, oh and it's free too. Not sure what people want anymore. Good tutorial.

[@chrisstyles4822]

Thank you so much! Could not figure out why my ssh wasn't working on my 2950. The aaa new-model command did it. Great Video!

[@littlezit2]

great video, i wondered why my ssh had stopped working and realised i put "no aaa new-model" when trying to get rid of configs i though i didnt need thank you!!

[@XPAESX]

Perfect tutorial --- was really helpful. The narrative was flawless. Thanks for posting this.

[@pauljohn5554]

Oh dude! I have been banging my head trying to figure this out. thank you. you make it so simple.

[@Techtips200]

Loved it even after 9 years ...would have loved if you have uploaded more videos.

[@johncgibson4720]

The aaa setup for ssh v2 is overkill. You said you are just trying to replace telnet with ssh, and your telnet already allows username/password authentication scheme. So, just go to line vty, then say "login local". aaa new model deviates from the good old UNIX local user/password . Declaring aaa new model means you want to deal with an environment of decoupled host versus security systems, local user database as last resort. In this case, there is no decoupling of any thing. Like you said, you just want to replace the same system's telnet with ssh.

[@raziahmed2]

I am a linux guy so I needed something like this video to enable ssh to in order to run ansible

[@AbhishekDas_Kolkata]

Thanks a lot..... It is explained very simply & elaborately. Thanks again.....

[@DonPezet]

If the "crypto" command is not present, then your IOS does not contain the encrypting feature set. Run "show version" or "show flash:" and look at the file name of your IOS file. If your IOS has the encrypting feature set you will see "K8" or "K9" in the file name. If that is missing, you will need to upgrade your IOS. Fortunately Cisco does not charge for that as long as your system is covered by SmartNet.

[@darrylsingh747]

Great video sir and thank you so much! Please do more... U have an excellent gift for imparting knowledge

[@RADCOMJ1]

Very well explained, precise and concise. Thanks. Now please can you got through all the rest of the CCNA materiel :-P

[@kusfei]

Thanks for the sharing. Very easy understand the knowledge from your video. Thank you.

[@kamalshergill9836]

SIMPLY THE BEST,MOST OF THE PEOPLE OUT THERE DO NOT KNOW HOW TO PUT THE PROPER VIDEOS,SOME OF THEM HAVE FLU WHEN THEY RECORD I DONT KNO WHY THEY STILL DO IT.LOL

[@MrAlexizhukov]

(Slow clap) This is an excellent video. Very professionally done, very detailed. Keep up the good work!

[@PILIF1983]

How could you run the command "username" while still in the interface fa0/0 mode ? I tried with Packe Tracer and it only works in the Global Config mode. In the curriculum the command "username" is also runned in Global Config mode.

[@brianturney2124]

My Cisco 2811 router doesn't have the 'crypto' command.

[@crknipe]

perfect, exactly the refresher I needed today

[@neumei626]

Excellently performed sir.

[@Onemanarmies]

I had to sign in to like this video and say this is really nice training video :)

[@FredK23]

Thanks for such an excellent explanation.

[@kantonera]

Thank you very much for the wonderful tutorial !

[@TheKaneada]

This really helped get my virtual lab setup ... thank you

[@eddieg227]

I have a 2621 cisco router but when I go to the configuration mode and type crypto ? it says "unrecognized command". The router is running 12.1(6). Do I need to upgrade the IOS software? Please help.

[@oma_unashamed]

Thanks for the insight 🤗

[@SimandanAdrian]

Congrats for a nice and clean video!!! 10+

[@BrenneroPardo]

thanks, it worked wonderful. Still can access via telnet though

[@rjc131]

To remote in from somewhere other than your own network... Just use the domain???

[@trevormasterson8035]

Hi Keith. Great Video. Can I ask if we need to configure the firewall to specify what ports and the inbound - outbound rules. ! Thanking You.

[@bulcub]

great tutorial!

[@ketanbarot806]

why you didn't create more video mate. you explained it very very nicely...wish you could upload more advanced config video on cisco.

[@staticnat7342]

Why would you need to configure an enable password when you set privilege level 15?

[@ramlakhanbhardwaj5408]

How to ssh enable in sg350 cisco switch

[@tjf4283]

I'm just glad this router has a pretty "snappy processor"

[@abdulrahmanyousef7767]

when set the priv to 15 is that low or high?

[@TheRightAsset]

Hii sir I wanted to know how to configure SSH using line vty 0 15 command in Cisco sg 300 switch

[@lollam8558]

what was that ip u put with the mask? is it the router or switch ip or what? thanks

[@afshinkavousi617]

Thanks, it was clear and good presentation

[@aungkhun3440]

really helpful, thanks a lot for your wonderful tutorial

[@ArmoredCyberNemesis]

Must the port remain port 22 or must I changed to another one to access my Netgear smart switch with ssh ?

[@mimia.8249]

Very well explained

[@blackhawksfan2525]

really good video. nicely done

[@BlessedChild41]

I like when a tutorial shows you how to do it especially when you are a beginner. I am an online student who is majoring in Computer networking and it is hard. We use a labsim program to do our work but I am having a hard time with how to create an access-list. The assignment is to Restrict Telnet and SSH Access by creating an access-list. Can you do a tutorial for this.

[@Inzolity]

Excellent video, very informative. Thank you.

[@muhammadishaq8348]

thats cool but will you please clear it a lil bit how to use it from client for the first time i guess you had loaded old ssh conection

[@sureshkachwa716]

Just one cisco 3750x switch, ISP cable connected to port 1 .Can I use the below config for SSH access over the internet and clients also should have internet access,clients will be connected to the same switch and ISP has DHCP ,DNS both enabled enable ! config t ! interface vlan 1 ip address no shutdown exit ! line vty 0 15 username xxxxxx secret xxxxxxx login local transport mode ssh ! ip route ip route 0.0.0.0 0.0.0.0

[@eddieg227]

Nice tutorial!

[@Eflashton]

very helpful and easy method ... love the video . thank you :-)

[@lucidlynxs]

nice tutorial! Thank you!

[@TouLee07]

great video sir!

[@johnyiu1]

good job, except you missed presenting the notes after you written down the 3 commands on the notepad.

[@vsonic86]

OMG, I just need to find you. Thank you!

[@1983Moseley]

Cheers dude!

[@lordnol]

well done! Do you mind your content being used for reaching some high school students the basics

[@Zakeusa]

finally someone speaks English

[@1234567895182]

Awesome video! Just one question. What was the purpose of setting the domain name on the router?

[@tech_geek7652]

👌👌👌 awesome

[@lalonator100]

Thank bro. It was aa little helpful

[@ibrahimnoor2371]

Thank you for simple explain

[@vipin088]

Hello All, Can anybody help me update push SSH path / or install SSH feature in Extreme switch ? Also, help me with procedure ...

[@pratik29889]

wow!!!!nice lessons..thanx

[@pakutharivalar]

Hey Keith how do I configure a SSH on a cisco router so that I can ssh into it from onsite. E.g I wanna configure ssh on the cisco router that is in the office and ssh into it from home. I understand that within the same network I can connect using the interface's Ip such as ssh -1 username 192.168.1.1 but how do I ssh from home to the router which is in the office?

[@J2897Tutorials]

Install OpenSSH on a box in the office. Open a WAN port (e.g. TCP 2222) to that box. Then, from home, connect using "SSH Local Port Forwarding". This assumes OpenSSH is listening on port 2222 and your office router is listening on port 22 for LAN connections only... Office WAN IP: 97.8.5.49 Office LAN IP: 192.168.0.3 Forwards port 8888 on your home machine to port 22 on the office router: ssh -L 8888:192.168.0.3:22 97.8.5.49 -p 2222 Bounces you off the box in the office straight into the office router: ssh locahost -p 8888 Both commands are run from your home machine in two separate terminals.

[@J2897Tutorials]

db.tt/82fJYgdS

[@pakutharivalar]

Thanks Johnny. Do you know of any putty equivalent for Mac OS X

[@J2897Tutorials]

Boo I think Macs are UNIX-line systems. So I suspect it may already have SSH installed. Try opening a terminal and typing: ssh -V

[@pakutharivalar]

+Johnny ssh, ftp, sftp are pre configured on OS-X. I meant to ask how to use Cisco cli on mac because they don't support putty.

[@maskawathlatif4190]

Thanks for sharing

[@sandyforman6676]

Great stuff!

[@kyko2166]

10 years old video how you doin :D

[@swarupt2001]

Very helpful!! Thanks

[@MichaelMoore-od4jz]

great information thanks

[@LichaelMewis]

thanks, it worked for me.

[@hikmatmarashdeh2293]

well done !

[@abubakkarsithik8296]

Hi Thank you so much wonderful video.I'm very happy

[@namakob92]

Thanks bro

[@mersinakpinar]

thank you

[@rukundoagira6364]

a gud tutorial

[@goldenguykrishna]

aaa new-model without this username wont work

[@raghavsood6156]

Thanks.

[@mahuubao]

Cisco 3700 Series Multiservice Access Routers Spezial Cisco 3725

[@stephencollis1453]

Can't not leave a thumbs up, what everyone else said. would really like to know what those 2 dislike people were on about

[@twanaosman1]

thanks

[@soorajpmenon9835]

Hi from 2021.

[@PhelpsLife]

Ethernet.... eh thernet X[

[@oma_unashamed]

Thanks for the insight 🤗