aaa authentication to a router/switch

cisco_kid2008

I would like to turn on AAA for all of my switches/routers. I am planning on using radius through IAS. All of the guides i have read state for authentication on the IAS side use pap which is clear text. Obviously if I use telnet it will be clear text anyways. What happens if i want to use ssh will that still be clear text.

CCIEWANNABE

um, no. ssh will be encrypted and the key encryption is 1024 i think by default on cisco routers unless otherwise specified. to enable ssh you must:

1) configure router with hostname
2) configure router with domain name
3) configure router with crypto key generate-rsa (at this time you will be able to specify size of key encryption)
4) enable the specified vty ports on your router to use ssh with the command: transport input ssh.
NOW TO ADD AAA AUTHENTICATION WITH SSH YOU MUST:
5) enable aaa with aaa new-model command (at this time forward all other authentication methods will not work, only those specified by aaa)
6) figure out what kind of aaa authentication you would like to perform (i.e. radius, tacacs, or local) and enable aaa authentication default group radius/tacacs/local
7) then set the appropriate aaa authentication command under the vty line configuration.

hope this helps :]
anybody want to help me out as well. i may have missed something, i am kinda buzzed.