Security
148
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
Description This command configures the allowed SSH protocol version 1 or version 2 ciphers that are
available on the SSH client or server. Client ciphers are used when the 7705 SAR node is
acting as an SSH client; server ciphers are used when the 7705 SAR node is acting as an
SSH server.
The no form of this command deletes the specified cipher index.
Default n/a
Parameters index — the index of the cipher in the list
Values 1 to 255
cipher-name — the allowed cipher name
Values For SSH1:
client ciphers: des, 3des, blowfish
server ciphers: 3des, blowfish
Table 8 lists the default index values used for SSH1:
Values For SSH2:
client ciphers: 3des-cbc, blowfish-cbc, cast128-cbc, arcfour,
aes128-cbc, aes192-cbc, aes256-cbc, rijndael-cbc
server ciphers: 3des-cbc, blowfish-cbc, cast128-cbc, arcfour,
aes128-cbc, aes192-cbc, aes256-cbc, rijndael-cbc
Table 9 lists the default index values used for SSH2:
Table 8 SSH1 Default Index Values
Cipher Index Value Cipher Name
10 3des
20 blowfish
30 des
Table 9 SSH2 Default Index Values
Cipher Index Value Cipher Name
10 aes128-cbc
20 3des-cbc
30 blowfish-cbc