HPE MSR1000 - Page 267

161
In FIPS mode:
ssh2 algorithm cipher { aes128-cbc | aes256-cbc | aes128-ctr | aes192-ctr | aes256-ctr |
aes128-gcm | aes256-gcm } *
undo ssh2 algorithm cipher
Default
SSH2 uses the encryption algorithms aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm,
aes256-gcm, aes128-cbc, 3des-cbc, aes256-cbc, and des-cbc in descending order of priority for
algorithm negotiation.
Views
System view
Predefined user roles
network-admin
Parameters
3des-cbc: Specifies the encryption algorithm 3des-cbc. Support for this keyword depends on the
device model.
aes128-cbc: Specifies the encryption algorithm aes128-cbc.
aes256-cbc: Specifies the encryption algorithm aes256-cbc.
des-cbc: Specifies the encryption algorithm des-cbc.
aes128-ctr: Specifies the encryption algorithm aes128-ctr.
aes192-ctr: Specifies the encryption algorithm aes192-ctr.
aes256-ctr: Specifies the encryption algorithm aes256-ctr.
aes256-gcm: Specifies the encryption algorithm aes256-gcm.
aes128-gcm: Specifies the encryption algorithm aes128-gcm.
Usage guidelines
If you specify the encryption algorithms, SSH2 uses only the specified algorithms for algorithm
negotiation. The algorithm specified earlier has a higher priority during negotiation.
Examples
# Specify the algorithm 3des-cbc as the encryption algorithm for SSH2.
<Sysname> system-view
[Sysname] ssh2 algorithm cipher 3des-cbc
Related commands
•
display ssh2 algorithm
•
ssh2 algorithm key-exchange
•
ssh2 algorithm mac
•
ssh2 algorithm public-key