Configuration Example: Enable/Disable MACs in Secure Mode

* Slot-1 Stack.46 # show ssh2
SSH module configuration details:
SSH Access            : Enabled
Key validity          : Valid
TCP port              : 22
VR                    : all
Access profile        : not set
Secure Mode           : On
Diffie-Hellman Groups : 1 (1024 bits prime), 14 (2048 bits prime)
Idle time             : 60 minutes
Ciphers               : aes128-ctr, aes192-ctr, aes256-ctr
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512

* Slot-1 Stack.47 # show ssh2 mac
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512

* Slot-1 Stack.48 # configure ssh2 disable mac hmac-sha1

* Slot-1 Stack.49 # show ssh2 mac
Macs                  : hmac-sha2-256, hmac-sha2-512

* Slot-1 Stack.50 # show ssh2
SSH module configuration details:
SSH Access            : Enabled
Key validity          : Valid
TCP port              : 22
VR                    : all
Access profile        : not set
Secure Mode           : On
Diffie-Hellman Groups : 1 (1024 bits prime), 14 (2048 bits prime)
Idle time             : 60 minutes
Ciphers               : aes128-ctr, aes192-ctr, aes256-ctr
Macs                  : hmac-sha2-256, hmac-sha2-512

* Slot-1 Stack.51 # configure ssh2 enable mac hmac-sha1

* Slot-1 Stack.52 # show ssh2 mac
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512

* Slot-1 Stack.53 # show ssh2
SSH module configuration details:
SSH Access            : Enabled
Key validity          : Valid
TCP port              : 22
VR                    : all
Access profile        : not set
Secure Mode           : On
Diffie-Hellman Groups : 1 (1024 bits prime), 14 (2048 bits prime)
Idle time             : 60 minutes
Ciphers               : aes128-ctr, aes192-ctr, aes256-ctr
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512
Published March 2020prev | next
Email this topic
Print this page Print this page
Leave feedback Feedback