Prerequisites for Implementing Secure Shell
The following prerequisites are required to implement Secure Shell:
You must be in a user group associated with a task group that includes the proper task IDs. The command reference guides include the task IDs required for each command. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Download the required image on your router. The SSH server and SSH client require you to have a a crypto package (data encryption standard [DES], 3DES and AES) from Cisco downloaded on your router.
From Cisco IOS XR Software Release 7.0.1 and later, the SSH and SFTP components are available in the baseline Cisco IOS XR software image itself. For details, see, SSH and SFTP in Baseline Cisco IOS XR Software Image.
To run an SSHv2 server, you must have a VRF. This may be the default VRF or a specific VRF. VRF changes are applicable only to the SSH v2 server.
Configure user authentication for local or remote access. You can configure authentication with or without authentication, authorization, and accounting (AAA). For more information, see the Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software module in the System Security Command Reference for Cisco NCS 6000 Series Routers publication and Configuring AAA Services on Cisco IOS XR Software module in the System Security Configuration Guide for Cisco NCS 6000 Series Routers publication.
AAA authentication and authorization must be configured correctly for Secure Shell File Transfer Protocol (SFTP) to work.