Let's go ahead and see how to configure a C score out there if the keys were generated on Linux and
we are using Linux as the SSX client.
Back on Linux, let's take a look at the public key cat home student, this is the user's home directory,
that SNH, the directory that contains the keys and the public key.
This is the private key and this is the public key.
The public key is printed on a single line, and that's fine, but Cisco iOS only supports a maximum
of 254 characters on a single line.
So you want to be able to paste this in one comment.
Fortunately, there is a useful Linux comment called fault that you can use to break the public key
in multiple parts.
Let's see the main page of the common man, Folt.
So up each input line to fit in a specified width.
So Folt, minus B, minus W, let's say 72.
How many characters do I want to have on each line and the path to the public health student that is
Sensage?
And I'd underline our essay that Bob.
OK, it broke the key on multiple lines, each line with 72 characters.
I'll remove the SSX minus RSA part at the beginning and the comment at the end and I'll copy the key
into a file.
Kopi.
And here based.
OK, that's the public.
Now back to the outer, I'll configure it to use this public key for authentication, so IPSC pop chain,
the user name that will use the key is a Linux user, user name, Linux user key string.
And I'll paste the key.
Perfect exit, exit and the last exit in timesaving, the configuration, let's verify the public fingerprint.
First, I want to be sure that their daughter has the correct key.
Sure, running config pipe Biggin Popke.
OK, this is the key fingerprint.
And only I can see the fingerprint with the following comment, SSX kigen my nacelle minus F and the
path to the key.
OK, I've forgotten something important.
The fingerprint displayed by this is Kraeutler, this from here is of type Amde five and by default,
Linux uses a sharp 256 hash.
So I must also add minus E an uppercase e m d five.
I want to see a fingerprint using the empty five hash protocol.
In fact, a key fingerprint is a hash and the option must be inserted before minus F, so minus E and
the FIF.
OK, that's the hash.
It starts with 97 and ends in B6.
And we know it's the same hash, so they're out there.
That is the correct publicly loaded.
Optional, but recommended for increased security.
You can configure the router to disable SSX password authentication and you have to run these two cumming's.
I want to run them on that out there, because this iOS doesn't support them, but maybe our viewers
will support them.
So no IPSC server authenticate user password and no IPSC server authenticate user keyboard.
OK, that's all this is how you configure SSX public authentication on Cisco Iooss from both Windows
and Linux.