changing the SSH listening port

aueddonline

I know you can do this on a PC but how do you do it on a router, can you?

Find more posts tagged with

SAVE $250 on Your CISCO Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View CISCO Boot Camps

Comments

Plazma

aueddonline wrote:

I know you can do this on a PC but how do you do it on a router, can you?

I don't think you can change this in IOS it uses the OpenSSH code and it's implementation. The closet thing you could come up with is how to do a reverse-telnet type situation with ssh.

aueddonline

Plazma wrote:

aueddonline wrote:

I know you can do this on a PC but how do you do it on a router, can you?

I don't think you can change this in IOS it uses the OpenSSH code and it's implementation. The closet thing you could come up with is how to do a reverse-telnet type situation with ssh.

ummmmmm, that sucks, thank for the reply

tiersten

"ip ssh port" will do it but the port must be between 2000 and 10000.

tiersten

Plazma wrote:

I don't think you can change this in IOS it uses the OpenSSH code and it's implementation.

Me being wrong ---> Regular IOS doesn't use OpenSSH. Cisco did their own implementation. Some of their other devices do use OpenSSH however. <--- Me being wrong

[edit]Cuz I was wrong[/edit]

aueddonline

tiersten wrote:

Plazma wrote:

I don't think you can change this in IOS it uses the OpenSSH code and it's implementation.

Regular IOS doesn't use OpenSSH. Cisco did their own implementation. Some of their other devices do use OpenSSH however.

cool, what's the deal with the rotary group?

tiersten

Nope. Plazma is right and I'm wrong

. Their old SSHv1 implementation is their own but the new SSHv1/SSHv2 implementation is OpenSSH based.

aueddonline

tiersten wrote:

Nope. Plazma is right and I'm wrong . Their old SSHv1 implementation is their own but the new SSHv1/SSHv2 implementation is OpenSSH based.

I dunno you guys, wondered why that didn't work

tiersten

aueddonline wrote:

cool, what's the deal with the rotary group?

Its to implement the reverse telnet/ssh feature. It still listens to the regular port 22.

tiersten

aueddonline wrote:

tiersten wrote:

Nope. Plazma is right and I'm wrong . Their old SSHv1 implementation is their own but the new SSHv1/SSHv2 implementation is OpenSSH based.

I dunno you guys, wondered why that didn't work

It should do what you want though still? I just tried it with my router and I can SSH into port 2001 and get the CLI.

Why do you want to change it anyway?

kryolla

Under vty lines the rotary is so you can change the telnet port

rotary 5 means it will use 3005 for telnet