![]() Pscp source -ls example, we can download the startup-config and put it on a directory: C:>pscp.exe password: On the client side we can use an utility such as pscp, from the PuTTY suite, to interact with our SCP server – the router! C:>pscp.exe R1(config)#username admin privilege 15 secret 0 topsecretįinally, we can turn the scp server on: R1(config)#ip scp server enable In order to use scp to manage configuration we must have an user account with enough privileges to access it: R1(config)# R1(config)#aaa authorization exec default local R1(config)#aaa authentication login default local ![]() ![]() % Generating 512 bit RSA keys, keys will be non-exportable. ![]() The name for the keys will be: R1.mydomain R1(config)#crypto key generate rsa general-keys modulus 512 ![]() It relays on SSH and AAA, so both features have to be enabled on the device: Router(config)#hostname R1 It’s easy to deploy, easy to use and Cisco recommends to use it in the Guide to Harden Cisco IOS Devices too: why do not use it?! □ With this feature we can transfer files, images and configurations in an encrypted way, and we can also authenticate accesses on the routers. SCP is a powerful tool introduced in IOS 12.2(2)T which allows us to securely transfer files to and from our routers. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |