Configures SSH Server and Client Message Authentication Codes (MACs).
SSH server must be enabled.
Refer to the online help on the device for the complete list of supported MACs.
device#configure terminal
device(config)# ssh server mac hmac-sha1,hmac-sha2-256,hmac-sha2-512
device(config)# ssh client mac hmac-sha1,hmac-sha2-256,hmac-sha2-512
device(config)# exit device# ssh-server restart
device(config)# do show running-config ssh server ssh server mac hmac-sha1,hmac-sha2-256,hmac-sha2-512 ssh server key rsa 2048 ssh server key ecdsa 256 ssh server key dsa device(config)# do show running-config ssh client ssh client mac hmac-sha1,hmac-sha2-256,hmac-sha2-512 device(config)# show ssh server status SSH Server Rekey Volume: 1024 SSH Server Auth Tries: 6 SSH Server Login Timeout: 120 VRF-Name: mgmt-vrf Status: Enabled VRF-Name: default-vrf Status: Enabled device(config)# do show ssh client status SSH Client Mac: hmac-sha1,hmac-sha2-256,hmac-sha2-512
Note
Thessh server key dsa
is not supported in FIPS and CC
modes.