Python learning | Part 24 |Netmiko Cisco SSH using RSA keypair for automation | without password

𝗙𝗼𝗿 𝗖𝗼𝗺𝗽𝗹𝗲𝘁𝗲 𝗣𝘆𝘁𝗵𝗼𝗻 𝗙𝗼𝗿 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀 𝗖𝗼𝘂𝗿𝘀𝗲:
𝗘𝗻𝗿𝗼𝗹𝗹 𝗳𝗼𝗿 𝗯𝗲𝗹𝗼𝘄 𝗨𝗱𝗲𝗺𝘆 𝗖𝗹𝗮𝘀𝘀: 𝟐𝟎𝟐𝟐 𝐕𝐞𝐫𝐬𝐢𝐨𝐧
𝑫𝒊𝒔𝒄𝒐𝒖𝒏𝒕𝒆𝒅 𝑹𝒆𝒇𝒆𝒓𝒓𝒂𝒍 𝑳𝒊𝒏𝒌:

To stay updated with my latest videos Please subscribe to my channel by clicking below

This video demonstrates how to initiate SSH Cisco device using RSA keypair from Netmiko. This can help in automating configuration tasks.
This includes
How to generate rsa keypair using ssh-keygen in linux
how to add the key in Cisco router for trusting the user public key
How to use 'use keys' and 'key_file' in netmiko for sh without password
Script

ssh-keygen -b 2048 -t rsa

The maximum line length at the Cisco CLI is 254 characters, but it's convenient to wrap smaller than this so that it fits on a terminal line.
show run

ip ssh pubkey-chain
username admin1

IP_LIST = open('20_devices')
for IP in IP_LIST:
print ('\n'+ IP.strip() + ' \n' )
RTR = {
'ip': IP,
'username': 'admin1',
'use_keys': True,
'key_file': '/data/05_PYTHON_DEMO/SSH_KEY/admin1',
'device_type': 'cisco_ios',
}

[timaarons]

Very clear and informative. Thank you very much.

[prasadtalekar]

Hi Bro ..it will be good if you show how to use windows 10 to do ssh from terminal using private key

[jaemercado]

This was good stuff and very helpful thank you for taking the time. I did have trouble with netmiko and ended up reading that paramiko/netmiko only deals with old PEM format. So I ended up making the key pair as such: ssh-keygen -m PEM -t rsa -b 2048 -f admin1.
This got me around the Exception errors.
Not sure why it worked on the video using (ssh-keygen -b 2048 -t rsa) ???

If your using napalm there is support as well for an SSH RSA key pair solution using the " optional_args".

quick example:
Its a bit confusing at first but you only need two arguments and you leave the password blank or fill it in with superfluous characters.
optional_args = {'use_keys': 'True', 'key_file': '/home/john/SSH_KEY/admin1'}
iosvl3 = driver('172.16.9.2', 'admin1', '***', optional_args = optional_args)

[chrisk]

Sir, I can ssh into my switch using 'ssh -i' command but it failed using the script, and go to the SSHException, I don't know why, if the key file not working I should not ssh into the switch

[NetworkEvolution]

𝗣𝗹𝗮𝘆𝗹𝗶𝘀𝘁: 𝗣𝘆𝘁𝗵𝗼𝗻 𝗟𝗲𝗮𝗿𝗻𝗶𝗻𝗴 𝗳𝗼𝗿 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀(𝟭𝟮𝟬+ 𝗩𝗶𝗱𝗲𝗼𝘀)
☸𝗣𝗹𝗲𝗮𝘀𝗲 𝗳𝗼𝗹𝗹𝗼𝘄 𝗯𝗲𝗹𝗼𝘄 𝗚𝗶𝘁𝗛𝘂𝗯 𝗣𝗮𝗴𝗲 𝗳𝗼𝗿 𝘁𝗵𝗲 𝗹𝗮𝘁𝗲𝘀𝘁 𝗰𝗼𝗱𝗲𝘀:
𝗣𝗹𝗮𝘆𝗹𝗶𝘀𝘁: 𝗖𝗶𝘀𝗰𝗼 𝗡𝗫𝗔𝗣𝗜-𝗖𝗟𝗜 𝗣𝘆𝘁𝗵𝗼𝗻 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻: 𝗡𝗲𝘅𝘂𝘀 𝟵𝗸 :𝗣𝗮𝗿𝘀𝗲 𝗷𝘀𝗼𝗻 𝗫𝗠𝗟 𝗖𝗼𝗻𝗳𝗶𝗴𝘂𝗿𝗮𝘁𝗶𝗼𝗻 𝗗𝗮𝘁𝗮
𝗣𝗹𝗮𝘆𝗹𝗶𝘀𝘁: 𝗟𝗲𝗮𝗿𝗻 𝘁𝗼 𝗣𝗮𝗿𝘀𝗲 𝗖𝗶𝘀𝗰𝗼 𝗖𝗼𝗻𝗳𝗶𝗴𝘂𝗿𝗮𝘁𝗶𝗼𝗻 𝘂𝘀𝗶𝗻𝗴 𝗣𝘆𝘁𝗵𝗼𝗻 𝗥𝗲𝗴𝗘𝘅:𝗿𝗲 𝗧𝘂𝘁𝗼𝗿𝗶𝗮𝗹(𝟭𝟱+ 𝗩𝗶𝗱𝗲𝗼𝘀)
𝗣𝗹𝗮𝘆𝗹𝗶𝘀𝘁: 𝗖𝗶𝘀𝗰𝗼 𝗜𝗻𝘁𝗲𝗿𝗳𝗮𝗰𝗲 𝗖𝗼𝗻𝗳𝗶𝗴𝘂𝗿𝗮𝘁𝗶𝗼𝗻 𝗣𝗮𝗿𝘀𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 𝗠𝘂𝗹𝘁𝗶𝘁𝗵𝗿𝗲𝗮𝗱𝗶𝗻𝗴 𝗣𝘆𝘁𝗵𝗼𝗻 𝗥𝗲𝗴𝗘𝘅 𝗦𝗰𝗿𝗶𝗽𝘁:𝗧𝗮𝗯𝘂𝗹𝗮𝘁𝗲 𝗧𝗮𝗯𝗹𝗲 𝗲𝘅𝗮𝗺𝗽𝗹𝗲(𝟰 𝗩𝗶𝗱𝗲𝗼𝘀)
𝗣𝗹𝗮𝘆𝗹𝗶𝘀𝘁: 𝗘𝗻𝗮𝗯𝗹𝗲 𝗣𝘆𝘁𝗵𝗼𝗻 𝗠𝘂𝗹𝘁𝗶𝘁𝗵𝗿𝗲𝗮𝗱𝗶𝗻𝗴 𝗶𝗻 𝗖𝗶𝘀𝗰𝗼 𝗖𝗼𝗻𝗳𝗶𝗴 𝗕𝗮𝗰𝗸𝘂𝗽 𝗦𝗰𝗿𝗶𝗽𝘁 𝗳𝗼𝗿 𝗣𝗮𝗿𝗮𝗹𝗹𝗲𝗹 𝗲𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻:𝗧𝗵𝗿𝗲𝗮𝗱𝗶𝗻𝗴 𝗧𝘂𝘁𝗼𝗿𝗶𝗮𝗹(𝟰 𝗩𝗶𝗱𝗲𝗼𝘀)
𝗣𝗹𝗮𝘆𝗹𝗶𝘀𝘁: 𝗔𝗻𝘀𝗶𝗯𝗹𝗲 𝗟𝗲𝗮𝗿𝗻𝗶𝗻𝗴 𝗙𝗼𝗿 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀 : 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻 𝘁𝘂𝘁𝗼𝗿𝗶𝗮𝗹 𝘄𝗶𝘁𝗵 𝗖𝗶𝘀𝗰𝗼 𝗘𝘅𝗮𝗺𝗽𝗹𝗲𝘀(𝟯𝟬+ 𝗩𝗶𝗱𝗲𝗼𝘀)

[roger]

i am using windows machine how can i generate Pub and Private Key ?

[robinchandy]

I am getting RSA finger print mismatch. im using gns3 on ubuntu.