Configuration Example: Enable/Disable MACs in Secure Mode

# show ssh2
SSH module configuration details:
SSH Access            : Enabled
Key validity          : Valid
Key type              : RSA 2048
TCP port              : 22
VR                    : all
Access profile        : not set
Secure Mode           : On
Diffie-Hellman Groups :  14 (2048 bits), 16 (4096 bits), 18 (8192 bits)
Idle time             : 60 minutes
Ciphers               : aes128-ctr, aes192-ctr, aes256-ctr
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512

# show ssh2 mac
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512

# configure ssh2 disable mac hmac-sha1

# show ssh2 mac
Macs                  : hmac-sha2-256, hmac-sha2-512

# show ssh2
SSH module configuration details:
SSH Access            : Enabled
Key validity          : Valid
Key type              : RSA 2048
TCP port              : 22
VR                    : all
Access profile        : not set
Secure Mode           : On
Diffie-Hellman Groups :  14 (2048 bits), 16 (4096 bits), 18 (8192 bits)
Idle time             : 60 minutes
Ciphers               : aes128-ctr, aes192-ctr, aes256-ctr
Macs                  : hmac-sha2-256, hmac-sha2-512

# configure ssh2 enable mac hmac-sha1

# show ssh2 mac
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512

# show ssh2
SSH module configuration details:
SSH Access            : Enabled
Key validity          : Valid
Key type              : RSA 2048
TCP port              : 22
VR                    : all
Access profile        : not set
Secure Mode           : On
Diffie-Hellman Groups :  14 (2048 bits), 16 (4096 bits), 18 (8192 bits))
Idle time             : 60 minutes
Ciphers               : aes128-ctr, aes192-ctr, aes256-ctr
Macs                  : hmac-sha1, hmac-sha2-256, hmac-sha2-512
Published March 2020prev | next
Email this topic
Print this page Print this page
Leave feedback Feedback