Utilizing SSH for Cisco 3500 series 1

[RNF0528]

Anyone have any experience with turning of port 80 on a switch and utilizing 443 or SSH?

My goal is to disable port 80 on my switches and utilize SSH.

Anyone know of good documentation to do this. I tried ciscos site and i keep hitting road blocks.

 

[jimfixit]

these are totally different protocols and methods of managing.

You can get port 80 to stop responding by not loading the http server. To do this issue "no ip http server"; that turns off the http service. Now, if you want to manage with a web interface but using the https protocol (443), issue the command ip http secure-server.

Now, if you don't want web-based management, then you have Telnet or SSH you can use to obtain the command line interface access. There is an excellent article that explains these options and how to enable SSH and disable telnet at:

http://www.itsyourip.com/cisco/how-to-enable-secure-shell-ssh-in-cisco-ios-and-disable-telnet/

All of this depends on your version of IOS of course, so your milage may vary.

 

[RNF0528]

Thanks for the help. I will let you know what I come up with!!!!

 

[RNF0528]

This is all that shows up. Theres no secure-server what do you think?

Switchname(config)#ip http ?
access-class Restrict access by access-class
authentication Set http authentication method
path Set base path for HTML
port HTTP port
server Enable HTTP server

 

[vipergg]

You need crypto code to run ssh . Check the IOS version . Most likely it will have a K9 somewhere in the image name , if not it won't support ssh or https either i believe. You can post a dir flash: and we can tell you.

 

[burtsbees]

Https is SSL, not SSH...is that what you want?
Viper is right, also...

Burt

 

[RNF0528]

Ok, Here is the image file. Will this support it?

System image file is "flash:c3550-i9q3l2-mz.121-11.EA1/c3550-i9q3l2-mz.121-11.EA
1.bin"

 

[Cluebird]

No

 

[burtsbees]

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

Cisco Feature Navigator

Burt