System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 149
preserve-key
Syntax [no] preserve-key
Context config>system>security>ssh
Description This command specifies the persistence of the SSH server host key. When enabled, the host
key will be saved by the server and restored following a system reboot. This command can
only be enabled or disabled when no SSH session is running.
The no form of the command specifies that the host key will be held in memory by the SSH
server and not be restored following a system reboot.
Default no preserve-key
server-cipher-list
Syntax server-cipher-list protocol-version version
Context config>system>security>ssh
Description This command enables the context to configure the list of allowed ciphers on the SSH server
based on the SSH protocol version.
Default 2
40 cast128-cbc
50 arcfour
60 aes192-cbc
70 aes256-cbc
80 rijndael-cbc
Table 9 SSH2 Default Index Values (Continued)
Cipher Index Value Cipher Name
Note: blowfish-cbc, cast128-cbc, arcfour, and rijndael-cbc are not available if the
7705 SAR node is running in FIPS-140-2-140-2 mode.