Enhanced Security and Performance
Per-Core CPU Average Setting
OcNOS introduces the cpu-core-monitor-average interval <60-600> command to set the averaging interval (in seconds) for CPU per-core usage monitoring. This command sets the average window OcNOS uses to calculate and report CPU usage per core. Configure any value between 60 and 600 seconds; the default is 60 seconds. Use the no cpu-core-monitor-average interval command to restore the default.
For more details, refer to the
SNMPv3 User Password Encryption
The SNMPv3 user password is now stored in an encrypted format in the /etc/snmp/snmp.conf file. Passwords associated with the CreateUser and trapsess entries are now stored in encrypted form using either MD5 or SHA encryption methods.
For more details, refer to the
Enhanced SSH HostKey Algorithm
After upgrading to 6.6.0, SSH sessions from remote servers fail because OpenSSH was updated to version 9.2p1, which deprecates ssh-rsa and ssh-dsa. The problem is further caused by the absence of the HostKeyAlgorithms in the upgraded sshd_config, resulting in rejected connections. This has been addressed in the 7.0.0 release by adding the HostKeyAlgorithms , enforcing security with modern algorithms such as Ed25519 and RSA-SHA.
The Key Exchange (KEX) algorithm list was subsequently updated to align with the new OpenSSL package, specifically regarding the sntrup761x25519-sha512 algorithm.
For more details, refer to the Secure Shell Commands topic in the OcNOS System Management Guide, Release 7.0.0.