2.1.1.2 Set version 2 for 'ip ssh version'

Information

Specify the version of Secure Shell (SSH) to be run on a router

SSH Version 1 has been subject to a number of serious vulnerabilities and is no longer considered to be a secure protocol, resulting in the adoption of SSH Version 2 as an Internet Standard in 2006.

Cisco routers support both versions, but due to the weakness of SSH Version 1 only the later standard should be used.

Solution

Configure the router to use SSH version 2

hostname(config)#ip ssh version 2

Impact:

To reduce the risk of unauthorized access, organizations should implement a security policy to review their current protocols to ensure the most secure protocol versions are in use.

See Also

https://workbench.cisecurity.org/benchmarks/12917

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6

Plugin: Cisco

Control ID: 2f9378d3c452810eee7f43d14b04dbfed98390f1c7d4307cd98cde13428e78e9