SSH: Implement SSH Public Key Authentication

Veit · March 2018

Hi,

I have got a suggestion for future ZyNOS releases:

It would be great to be able to log into the switch using an SSH Pubkey instead of password.

Using pubkeys would increase security (especially combined with a possibility to disable password auth for SSH) and make scripting/automation easier as wrappers like sshpass would be no longer required.

Best regards,
// Veit

JasonTsai · April 2018

Hi @Veit,

We have an internal meeting to evaluate this idea, and this feature is now in Zyxel future roadmap.

Thanks for your advice.

danyedinak · November 2020

Whatever happened with this? Was it ever implemented anywhere?

JasonTsai · December 2020

Hi @danyedinak ,

Thanks for following up on this.

Although we understand the benefit of offering SSH public key authentication and we’ve already add it to our roadmap, the availability has been pushed out several times due to more urgent project demands.

Tomaszz · February 9

Over 3 years later, is there any update on this?

I know that this can be configured with ACS server, but a menu option from the supervisor level would be useful, to see what keys are present and add any manually.

Zyxel_Kay · February 16

Hi @Tomaszz

We are pleased to inform you that this feature is set to be introduced in the switch V4.90 firmware version.

Since our firmware updates are customized for each switch series, could you please specify the model of the switch you are inquiring about? This will enable us to offer you the most accurate and relevant information regarding availability and implementation.

Veit · February 22

https://community.zyxel.com/en/discussion/comment/62077#Comment_62077

Hi Kay,

I am the original author.

We use XGS2210, XGS2220 and XGS4600 series switches.

Best regards,
// Veit

Zyxel_Kay · February 29

Hi @Veit

SSH public key authentication in ZyNOS4.90 is being implemented in series by series.
We have GS1350 series already support this, following by GS2220 series ( support in Q3’24) and GS1920 series (support Q4’24).

ZyNOS4.90 for XGS2200 series will be focus on the new XGS2220 series only, with estimate time frame around Q4’24.
XGS4600 cannot fit in the pipeline for this year, so it will be plan at a later time frame.

We apologize for the long waited patience on this as we work to balance new feature request and introduce advanced technology products (2.5G / Multi-gig / 10G) to the Zyxel switch portfolio.

mietz · June 21

https://community.zyxel.com/en/discussion/comment/62590#Comment_62590

Hi Kay, is there an a eta when 4.90 will be available for XMG1915 Series?

Zyxel_Kay · June 24

Hi @mietz

We’ll introduce SSH public key authentication for XMG1915 in further FW version. The schedule is not finalized yet since we also need to take other models and features into consideration, we will update XMG1915’s ETA once it is available.

SSH: Implement SSH Public Key Authentication

Active · Last Updated April 2021

Comments

Categories

Switch Help Center