Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Configure SSH support for known hosts and for administering SSH host key updates.


fetch-from-server server

Retrieve SSH public host key information from the specified server. Specify by server name or IP address.

host host-name

Hostname of the SSH known host entry. This option has the following suboptions:

  • dsa-key key—Base64-encoded Digital Signature Algorithm (DSA) key for SSH version 2.

  • ecdsa-sha2-nistp256-key key—Base64-encoded ECDSA-SHA2-NIST256 key.

  • ecdsa-sha2-nistp384-key key—Base64-encoded ECDSA-SHA2-NIST384 key.

  • ecdsa-sha2-nistp521-key key—Base64-encoded ECDSA-SHA2-NIST521 key.

  • ed25519-key key—Base64-encoded ED25519 key.

  • rsa-key key—Base64-encoded public key algorithm that supports encryption and digital signatures for SSH version 1 and SSH version 2.

  • rsa1-key key—Base64-encoded RSA public key algorithm, which supports encryption and digital signatures for SSH version 1.

load-key-file filename

Import SSH host key information from the named file. If the file is in a directory other than the home directory of the device, specify pathname as well. The default filename is /var/tmp/ssh-known-hosts.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 7.5.