Cisco Storm-Control – Default Action When Optional Action is Configured

Well the first difference would be that switchport block unicast blocks unknown unicast and storm-control multicast blocks multicast packets.

The difference between switchport block XXXcast and storm-control XXXcast is exactly what you want to exclude in your question. You can pick any percent value for storm-control. It will block traffic of the specified type which exceeds this percentage of bandwidth on the port. switchport block is a simple yes/no. It blocks everything when activated.

Update:

As ytti mentioned, on some low-end boxes when storm-control multicast is exceeded all traffic will get filtered. In that case storm-control multicast is dangerous and useless.

Also on high-bandwidth interfaces (1/10GE) please remember that even a small percentage of the bandwidth can kill a box that punts the packets to the CPU. If possible use CoPP to protect the control plane. Also always use pps instead of bps for CoPP if possible.

I use an SG300 at home as my core switch. Getting SSH set up is not too bad:

conf t
crypto key generate rsa
ip ssh server
end

That will generate the SSH key and enable the SSH server. If you question-mark your way along those command structures you will find some options.

You can view the public and private RSA SSH keys with:

show crypto key rsa

I've not done an SSL cert import myself, but looking through the CLI I'd take a stab at the following:

conf t
crypto certificate 1 import
ip https certificate 1

There are two "slots" for certificates, so you can specify slot 1 or 2 for the import or a self-signed certificate generation.

The import function does not seem to have an option to install a PKCS12 certificate, so you may need to import the private key separately with:

conf t
crypto key import rsa

I'm not 100% sure on the SSL setup, but the SSH key setup above works.