C613-50631-01 Rev A Command Reference for IE340 Series 3354
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
SECURE SHELL (SSH) COMMANDS
SSH
SERVER SECURE-ALGS
ssh server secure-algs
Overview Use this command to force the SSH server to only use ciphers, key exchange
algorithms and Message Authentication Code (MAC) algorithms that are currently
considered best-practice.
This command is the same as using all of the commands ssh server secure-ciphers,
ssh server secure-hostkey, ssh server secure-mac, and ssh server secure-kex.
However, it does not include the optional exclude-nist-curves parameter of ssh
server secure-kex.
Use the no variant of this command to stop forcing the SSH server to use this
restricted set of algorithms.
Syntax
ssh server secure-algs
no ssh server secure-algs
Default Disabled.
Mode Global Configuration
Usage notes To see the list of algorithms, use the show ssh server command.
This command is not available in Secure Mode because Secure Mode already
forces the device to use only FIPS-approved algorithms.
Example To force the SSH server to use best-practice algorithms, use the commands:
awplus# configure terminal
awplus(config)# ssh server secure-algs
Related
commands
show ssh server
ssh server
ssh server secure-ciphers
ssh server secure-hostkey
ssh server secure-kex
ssh server secure-mac
Command
changes
Version 5.5.1-1.1: command added