Common Configs and Commands

SSH Config Cisco 4948:

 Click here to expand...
hostname <cus-initials>-sw0
ip domain-name hq.<cus name-tld>
username <username> privilege 15 secret 0 <password>
crypto key generate rsa general-keys modulus 2048


line vty 0 4
exec-timeout 2880 0
login local
length 0
transport input ssh


ip name-server 4.2.2.2
ip name-server 8.8.8.8


SSH Config Cisco ASA 5500:

 Click here to expand...

Source: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118075-configure-asa-00.pdf

hostname <cus-initials>-r0
domain-name <preferred domain name>
username <user> password <password> privilege 15
aaa authentication ssh console LOCAL
crypto key generate rsa general-keys modulus 2048
ssh <single host or network> <subnet mask> <name if>
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 60 

dns domain-lookup outside
dns name-server 8.8.8.8 4.2.2.2

Config connect to legacy SSH devices. 

 Click here to expand...

~/.ssh/config

Host *
        KexAlgorithms +diffie-hellman-group1-sha1

/etc/ssh/ssh_config

Host *
Protocol 2,1
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc
SendEnv LANG LC_*
HashKnownHosts yes
GSSAPIAuthentication yes