General operating rules and notes

  • Public keys generated on an SSH client must be exportable to the switch. The switch can store 100 client key pairs.

  • The switch own public/private key pair and the (optional) client public-key file are stored in the switch flash memory and are not affected by reboots or the erase startup-config command.

  • Once you generate a key pair on the switch you should avoid re-generating the key pair without a compelling reason. Otherwise, you must re-introduce the switch public key on all management stations (clients) you previously set up for SSH access to the switch. In some situations this can temporarily allow security breaches.

  • With SSH running, the switch allows one console session and up to five other sessions (SSH and/or Telnet).