This documentation is for an older version of the software. If you are using the current version of Cumulus Linux, this content may not be up to date. The current version of the documentation is available here. If you are redirected to the main page of the user guide, then this page may have been renamed; please search for it there.

SSH for Remote Access

You use SSH to securely access a Cumulus RMP switch remotely.

Access Using Passkey (Basic Setup)

Cumulus RMP uses the openSSH package to provide SSH functionality. The standard mechanisms of generating passwordless access just applies. The example below has the cumulus user on a machine called management-station connecting to a switch called cumulus-switch1.

First, on management-station, generate the SSH keys:

cumulus@management-station:~$ ssh-keygen
   Generating public/private rsa key pair.
   Enter file in which to save the key (/home/cumulus/.ssh/id_rsa):
   Enter passphrase (empty for no passphrase):
   Enter same passphrase again:
   Your identification has been saved in /home/cumulus/.ssh/id_rsa.
   Your public key has been saved in /home/cumulus/.ssh/
   The key fingerprint is:
   8c:47:6e:00:fb:13:b5:07:b4:1e:9d:f4:49:0a:77:a9 cumulus@management-station
   The key's randomart image is:
   +--[ RSA 2048]----+
   |    .  .= o o.   |
   |     o . O *..   |
   |    . o = =.o    |
   |     . O oE      |
   |      + S        |
   |       +         |
   |                 |
   |                 |
   |                 |

Next, append the public key in ~/.ssh/ into ~/.ssh/authorized_keys in the target user’s home directory:

cumulus@management-station:~$ scp .ssh/ cumulus@cumulus-switch1:.ssh/authorized_keys
    Enter passphrase for key '/home/cumulus/.ssh/id_rsa':

Remember, you cannot use the root account to SSH to a switch in Cumulus RMP.

Completely Passwordless System

When generating the passphrase and its associated keys, as in the first step above, do not enter a passphrase. Follow all the other instructions.

Useful Links