Forum Discussion
How to configure ssh access by key on F5OS
Hello,
can you explain me how to configure ssh access on F5OS (Base OS Version 1.8.3 - product rSeries 2600)
I would like to connect to my product with ssh key (ssh -i .... mailto:admin@x.x.x.x)
The command ssh-copy-id do not work.
Thanks by advance for your help.
2 Replies
- charlestips
Employee
Hey there!
The reason ssh-copy-id doesn't work is that F5OS doesn't use the traditional ~/.ssh/authorized_keys file path that ssh-copy-id expects. SSH public keys are managed through the F5OS configuration plane instead. Here are your options:Option 1: F5OS CLI
SSH in with your password first, then enter config mode and add your public key:
syscon-1-active(config)# system aaa authentication users user admin config authorized-keys key my-key
syscon-1-active(config-key-my-key)# key-type ssh-rsa
syscon-1-active(config-key-my-key)# key-data "AAAAB3NzaC1yc2EAAAADAQ..."
syscon-1-active(config-key-my-key)# commit
Replace my-key with any label you want, and paste your full public key string (from ~/.ssh/id_rsa.pub) as the key-data value.
Option 2: WebUI
Navigate to: System Settings → User Management → admin → SSH Keys
Add your public key there and save. Straightforward if you prefer GUI.
Verify it worked:show system aaa authentication users user admin config authorized-keys
One thing to double-check: Make sure SSH access is allowed on the management interface and that you're hitting the correct port (default 22). You can verify under show system mgmt-ip and check system ssh config for any allowed-ips restrictions.
Hope that helps!
- Melissa_C
Moderator
Hello integration35
I noticed there hadn't been an update from what charlestips had provided you and was wanting to encourage you to update if that had assisted in resolving your issue. If not please let us know and we can see if you have options for support to assist.
-Melissa
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com