Establishing SSH on Cisco Devices?

UsualSuspect7

Why do we have to use the ip domain-name command to establish SSH on a Cisco device? I'm thinking it already has an IP address why must we use a domain name? what if we don't have a domain name to use?


Thank You,

pujan96

I believe its required to generate the crypto Key for the device

robo78

UsualSuspect7 wrote: »

why must we use a domain name?

as mentioned, it's a requirement. Before a device can use secure channel, it's need to have some secret material generated from these domain name and also hostname.

UsualSuspect7 wrote: »

what if we don't have a domain name to use?

well, you must choose one. Otherwise you can't enable ssh.

CryptoQue

The RSA key name consists of a hostname and a domain name. Since SSH depends on RSA key in order to function, a domain name must be established prior to generating a RSA key and enabling SSH. You can make up a simple Cisco IOS domain like "ip domain name passccna.UsualSuspect7.com"

UsualSuspect7

Awesome! Thank You all so much I understood it was needed, but I just was curious as to why exactly. Thank You.

Cisco Inferno

CryptoQue wrote: »

The RSA key name consists of a hostname and a domain name. Since SSH depends on RSA key in order to function, a domain name must be established prior to generating a RSA key and enabling SSH. You can make up a simple Cisco IOS domain like "ip domain name passccna.UsualSuspect7.com"

Your username is very appropriate for clearing this up. thanks

CryptoQue

Thanks Cisco Inferno!