Configuration Example: Enable/Disable MACs in FIPS Mode
* Slot-1 Stack.30 # show ssh2
SSH module configuration details:
SSH Access : Enabled
Key validity : Valid
TCP port : 22
VR : all
Access profile : not set
Secure Mode : Off
Diffie-Hellman Groups : 1 (1024 bits prime), 14 (2048 bits prime)
Idle time : 60 minutes
Ciphers : aes128-ctr, aes192-ctr, aes256-ctr, aes128-cbc, 3des-cbc, aes192-cbc, aes256-cbc, rijndael-cbc@lysator.liu.se
Macs : hmac-sha1, hmac-sha2-256, hmac-sha2-512
* Slot-1 Stack.31 # configure ssh2 disable mac hmac-sha1
* Slot-1 Stack.32 # show ssh2 macs
Macs : hmac-sha2-256, hmac-sha2-512
* Slot-1 Stack.33 # show ssh2
SSH module configuration details:
SSH Access : Enabled
Key validity : Valid
TCP port : 22
VR : all
Access profile : not set
Secure Mode : Off
Diffie-Hellman Groups : 1 (1024 bits prime), 14 (2048 bits prime)
Idle time : 60 minutes
Ciphers : aes128-ctr, aes192-ctr, aes256-ctr, aes128-cbc, 3des-cbc, aes192-cbc, aes256-cbc, rijndael-cbc@lysator.liu.se
Macs : hmac-sha2-256, hmac-sha2-512
* Slot-1 Stack.34 # configure ssh2 enable mac hmac-sha1
* Slot-1 Stack.35 # show ssh2 macs
Macs : hmac-sha1, hmac-sha2-256, hmac-sha2-512
* Slot-1 Stack.36 # show ssh2
SSH module configuration details:
SSH Access : Enabled
Key validity : Valid
TCP port : 22
VR : all
Access profile : not set
Secure Mode : Off
Diffie-Hellman Groups : 1 (1024 bits prime), 14 (2048 bits prime)
Idle time : 60 minutes
Ciphers : aes128-ctr, aes192-ctr, aes256-ctr, aes128-cbc, 3des-cbc, aes192-cbc, aes256-cbc, rijndael-cbc@lysator.liu.se
Macs : hmac-sha1, hmac-sha2-256, hmac-sha2-512
Print
this page
Email this topic
Feedback
View PDF
Download EPUB