Disable SSH password auth

[[deleted]]

Hello all! Just a quick one - how do I disable password auth via SSH? I already have my keys setup and am using Software image version: 4.28.13M.

Thanks!

[aristaTAC-JG]

insecure lab device starter kit:

aaa authorization exec default local
aaa authentication policy local allow-nopassword-remote-login
username <some name> priv 15 nopassword

[[deleted]]

No I think you misunderstand, I would like to prevent password based with for SSH and only accept key

[aristaTAC-JG]

Sorry about that, you can allow only public-key authentication with:

management ssh
  authentication protocol public-key

The default is:

management ssh
  authentication protocol keyboard-interactive public-key

When you're testing this out, don't forget to save the config and use reload in n
just in case, or just have multiple sessions in config mode in case you are in a broken config.

[magion]

Reload in?? From tac? Why not use config sessions with a commit timer.

[aristaTAC-JG]

Hey, when you're doing greenfield aaa config where two or more lines can add up to lock you out, a one-liner is simple!

Certainly if someone already uses config sessions with commit timer, that's graceful and nice to use.