To do this, expand Connection, then expand SSH and then click on Auth.Ĭlick on the Browse button under Private key file for authentication and select the private key file you saved out of puTTY earlier. However, this time, we’ll need to load up the private key into puTTY also.
Open puTTY and enter in the IP address of your switch in the Host Name box as usual.
Keyclick switch password#
Once we enable automatic login, you’ll just have to enter the username and password for the private key and you’ll be in. At this point, when you try to login, you’ll need to enter login credentials twice: once for the private key and once for the normal user account. Now all we have to do is login using our private key and password. Click Apply and then click Close if you get a Success message at the top. Copy the entire contents and paste it into the Public Key window. Make sure the Key Type is set to RSA and then go ahead and open your public SSH key file that you saved earlier using a program like Notepad. If you want the extra security, use a different username, otherwise just name it the same as your current one.Ĭlick the Add button and you’ll get the Add SSH User window pop up. If you decide to choose a different username here, then you will get a prompt where you have to enter the SSH private key user name and password and then you’ll have to enter your normal username and password (listed under Admin – User Accounts). If you choose the same user name, then you can check the Enable button under Automatic Login and when you go to log into the switch, you’ll simply have to type the username and password for the private key and you’ll be logged in. Back on the SSH User Authentication page, the user you need to add to the SSH User Authentication Table (by Public Key) can either be the same as what you have under Administration – User Accounts or different. Currently, I can use this account to access the web-based GUI and the CLI. Firstly, go to Administration – User Accounts to see what accounts you currently have for login.Īs you can see, I have one account called akishore for accessing my switch. Here’s where you can choose from two different options. Now back to the SSH User Authentication screen we were on earlier. Check out my post on using VeraCrypt to create an encrypted volume. Make sure these files are saved in a secure location, preferably in an encrypted container of some sort that requires a password to open. Once you have typed in the passphrase twice, you should click the Save public key and Save private key buttons. It’s a good idea to use a long passphrase to protect the key from brute-force attacks. Once the keys have been generated, you need to type in a passphrase, which is basically like a password to unlock the key. You’ll see a blank screen and you really shouldn’t have to change any of the settings from the defaults shown below.Ĭlick on the Generate button and then move your mouse around the blank area until the progress bar go all the way across. To generate the keys, go ahead and open puTTYGen first. In this example, we’ll be using puTTYGen, which is a program that comes with puTTY. Before we get into adding the user, we first have to generate a public and private key. Don’t check the Enable button next to Automatic login just yet as I’ll explain that further down. Click the Apply button to save the changes. In the right-hand pane, go ahead and check the Enable box next to SSH User Authentication by Public Key. First, click on Security, then SSH Server and finally SSH User Authentication.
Keyclick switch update#
Once I get that working, I’ll update this post with the CLI commands that will accomplish what we will do through the GUI for now. I tried to use the CLI interface to enable public key authentication, but it would not accept the format for my private RSA key.
Keyclick switch how to#
In my example, I’ll show you how to enable the features using the web-based GUI. Overall, the process for getting public key authentication to work for SSH is straightforward. Enable SSH User Authentication by Public Key Note: Before you get started on this tutorial, make sure you have already enabled the SSH service on the switch, which I mentioned in my previous article linked above. In addition, I’ll show you how to configure it so that you can either use just the key to login or force the user to type in a username/password along with using the private key.
I’ll then show you how to login using the new keys. In this article, I’ll show you how to enable public key authentication on an SG300 Cisco switch and how to generate the public and private key pairs using puTTYGen.
0 kommentar(er)
