Cisco Switch SSH – Login Local vs Login Synchronous

ciscopacket-tracersshswitch

I dont understand what those two comands mean when im enabling ssh
on Vty-line.
Can someone please explaim me please whatthose comand do and why i need to use them?

Best Answer

login local tells the router to use the local database for authentication. You add account to the local database using the username command.

logging synchronous (not login synchronous) formats the CLI output so that when information is displayed on the console, it doesn't affect the CLI prompt. After console output is shown, the router re-displays the CLI prompt to make entering commands easier.

Related Solutions

How to block ssh tunneling traffic

Preventing outbound ssh connections, and thus any tunnels, would require a complete blockade of outbound connections via deep packet inspection. Looking at ports will be 100% useless. You have to look at the actual packet payload to know it's SSH. (this is what websense is doing.)

The only other option is setting up a "proxy" host. Lock down the configuration so the ssh client and server will not allow tunneling, then allow only that machine to make outbound ssh connections -- of course, this includes securing the system as well, otherwise people can run whatever ssh software they want.

Router – Domain name for SSH

It isn't necessary to create a domain name to create SSH keys. The below syntax will allow you to generate RSA keys for SSH use without one.

router(config)#crypto key generate rsa general-keys label RSAKEY

Best Answer

Related Solutions

How to block ssh tunneling traffic

Router – Domain name for SSH

Related Topic