ssh algorithm encryption

Use this command to set an encryption algorithm for SSH sessions.

An SSH server authorizes connection of only those algorithms that are configured from the list below. If a client tries establishing a connection to the server with the algorithm encryption that are not part of the list, the connection will not established.

SSH supports these encryption algorithms:

Advanced Encryption Standard Counter:

aes128-ctr
aes192-ctr
aes256-ctr
aes128-cbc

Advanced Encryption Standard Cipher Block Chaining:

aes192-cbc
aes256-cbc

Triple Data Encryption Standard Cipher Block Chaining:

3des-cbc

Use the no form of this command to not encrypt SSH sessions.

Command Syntax

Copy
ssh server algorithm encryption {aes128-ctr | aes192-ctr | aes256-ctr | aes128-cbc |aes192-cbc | aes256-cbc | 3des-cbc} (vrf (NAME|management)|))
no ssh server algorithm encryption {aes128-ctr | aes192-ctr | aes256-ctr | aes128-cbc |aes192-cbc | aes256-cbc | 3des-cbc} (vrf (NAME|management)|)

Parameters

aes18-ctr

AES 128 bit Counter Mode

aes192-ctr

AES 192 bit Counter Mode

aes256-ctr

AES 256 bit Counter Mode

aes128-cbc

AES 128 bit Cipher block chaining

aes192-cbc

AES 192 bit Cipher block chaining

aes256-cbc

AES 256 bit Cipher block chaining

3des-cbc

Triple DES Cipher block chaining

vrf

Virtual Routing and Forwarding

NAME

Virtual Routing and Forwarding name

vrf management

Defines the management VRFClosed Virtual Routing and Forwarding instance.

vrf NAME

Specify the user-defined VRF instance name.

Default

No default value is specified.

By default, all the ciphers are supported for a new SSH client to connect to the SSH server.

Command Mode

Configure mode

Applicability

This command was introduced before OcNOS version 1.3. Added parameter VRF NAME in OcNOS version 6.5.3

Examples

Copy
#configure terminal
    (config)#ssh server algorithm encryption aes128-ctr