Mass deployment of SSH? SNMPv3?

[Preston Gallwas]

I was looking to switch all TELNET connections to SSH for PCM in an effort to boost network security. Is there a way to mass-configure SSH? What are the 'gotchas'? Is there anything I should know about limitations of using SSH only?

Likewise, I'd also like to implement SNMPv3. Same questions as above. Your help is appreciated in these matters

[Kell van Daal]

Hi Preston,

an easy way to do this is to use the "CLI" feature in PCM.
Just select all the switches you like to adjust, and click on the CLI button.

There you can input commando's that will be executed on the the selected switches.
Something like:

crypto key generate ssh
ip ssh
etc...

Then deploy these commands to the selected switches (can also be scheduled).
After this, check if ssh and snmpv3 works for all switches.
If it does, you can use the CLI feature again to remove the normal telnet and snmpv2 if wanted.

[Preston Gallwas]

Thanks -- they're all procurve 2600 series running 8.53 firmware..so it should be fine.

Theres no confirmatino to the cert generation?

I guess I'm just not familiar with what commands need to be set for a full-implementation for SNMPv3 either then

thanks for the reply!

[COS_3]

Does anyone know if 2500 series, 4000m and 8000m supports SSH ?