service password-encryption username {NAME} privilege 15 secret {PASSWORD} ip domain-name {DOMAIN} ip ssh version 2 crypto key generate rsa 2048 crypto key generate rsa modulus 2048 :sometimes you need the word "modulus" line vty 0 15 transport input ssh privilege level 15 exit aaa new-model