Configure Encryption Type

Procedure

  1. Enter Global Configuration mode:

    enable

    configure terminal

  2. Configure the type of encryption to use:

    ssh encryption-type {[3des-cbc][aead-aes-128-gcm-ssh ][aead-aes-256-gcm-ssh] [aes128-cbc][aes128-ctr][aes192-cbc][aes192-ctr][aes256-cbc][aes256-ctr][blowfish-cbc] [rijndael128-cbc][rijndael192-cbc]}

Variable Definitions

The following table defines parameters for the ssh encryption-type command.

Variable Value

[3des-cbc][aead-aes-128-gcm-ssh ][aead-aes-256-gcm-ssh] [aes128-cbc][aes128-ctr][aes192-cbc][aes192-ctr][aes256-cbc][aes256-ctr][blowfish-cbc] [rijndael128-cbc][rijndael192-cbc]

Configures the encryption-type. Select an encryption-type from one of the following:

  • 3des-cbc

  • aead-aes-128-gcm-ssh

  • aead-aes-256-gcm-ssh

  • aes128-cbc

  • aes128-ctr

  • aes192-cbc

  • aes192-ctr

  • aes256-cbc

  • aes256-ctr

  • blowfish-cbc

  • rijndael128-cbc

  • rijndael192-cbc

By default, all encryption types are enabled.

If you configure the switch in Enhanced Secure Mode, 3des-cbc and blowfish-cbc are disabled by default.