Free CCNA | SSH | Day 42 Lab | CCNA 200-301 Complete Course

Introduction

In this tutorial, you'll learn how to configure SSH (Secure Shell) on Cisco devices, which is crucial for secure remote management. This step-by-step guide is based on the Day 42 lab from Jeremy's IT Lab's free CCNA 200-301 complete course, designed to provide hands-on experience essential for your CCNA certification.

Step 1: Access the Cisco Device

• Start by connecting to your Cisco device through the console using terminal software (like PuTTY or Tera Term).
• Enter your device's credentials to access the command line interface (CLI).

Step 2: Configure Hostname and Domain Name

• Set a hostname for your device to identify it on the network. Use the following command:

  hostname YourDeviceName
  

• Specify the domain name, which is necessary for SSH configuration:

  ip domain-name yourdomain.com
  

Step 3: Generate SSH Keys

• Generate the encryption keys required for SSH. Use the following command:

  crypto key generate rsa
  

• When prompted, choose a key size (2048 bits is recommended). This enhances security.

Step 4: Create User Accounts

• Configure a user account with a password that will be used for SSH access:

  username YourUsername privilege 15 secret YourPassword
  

• This user will have full administrative privileges (privilege level 15).

Step 5: Enable SSH Version 2

• To ensure you are using the most secure version of SSH, enable SSH version 2:

  ip ssh version 2
  

Step 6: Configure VTY Lines

• Access the virtual terminal lines configuration:

  line vty 0 4
  

• Set the login method to use local user accounts:

  login local
  

• Optionally, configure a timeout for idle sessions:

  exec-timeout 5
  

Step 7: Secure Access

• Ensure that only SSH is enabled for incoming connections:

  transport input ssh
  

Step 8: Save the Configuration

• Save your configuration to ensure changes persist after a reboot:

  write memory
  

Conclusion

You've successfully configured SSH on your Cisco device, enhancing its security for remote management. Remember to test your SSH connection using an SSH client to ensure all settings are correctly applied. This hands-on experience is vital not only for your CCNA exam but also for real-world networking scenarios. For further practice, consider exploring additional labs or resources in the CCNA course.