ssh server algorithm mac

Use this command to configure MAC algorithms.

Use no parameter to remove the MAC algorithms.

Command Syntax

Copy
ssh server algorithm mac MAC_NAME vrf (|management|NAME) 
no ssh server algorithm mac

Parameters

mac

Specifies the SSH encryption type as MAC exchange.
hmac-sha1
hmac-sha1-96
hmac-sha2-256
hmac-sha2-512
hmac-md5
hmac-md5-96
umac-64@openssh.com
umac-128@openssh.com
hmac-sha1-etm@openssh.com
hmac-sha1-96-etm@openssh.com
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-md5-etm@openssh.com
hmac-md5-96-etm@openssh.com
umac-64-etm@openssh.com
umac-128-etm@openssh.com

vrf management

Defines the management VRFClosed Virtual Routing and Forwarding instance.

vrf NAME

Specify the user-defined VRF instance name.

Default

Refer to ssh server default algorithm .

Command Mode

Configure mode

Applicability

Introduced in OcNOS version 6.5.3.

Example

To configure the specific MAC algorithm, execute the following command.

Copy
OcNOS(config)#ssh server algorithm mac hmac-sha2-256 
OcNOS(config)#ssh server algorithm mac hmac-sha2-256 vrf management

To configure the multiple MAC algorithms, execute the following command.

Copy
OcNOS(config)#ssh server algorithm mac hmac-sha2-512 umac-128-etm hmac-md5-96-etm hmac-sha2-256-etm hmac-sha1-etm 
OcNOS(config)#ssh server algorithm mac hmac-sha2-512 umac-128-etm hmac-md5-96-etm hmac-sha2-256-etm hmac-sha1-etm vrf management

To modify the MAC algorithm for user defined VRF, execute the following command.

Copy
OcNOS(config)#ssh server algorithm mac hmac-md5-96-etm hmac-sha2-256 hmac-sha2-512-etm vrf VRF1 
OcNOS(config)#ssh server algorithm encryption 3des-cbc vrf VRF1 
OcNOS(config)#ssh server algorithm kex diffie-hellman-group-exchange-sha1 diffie-hellman-group14-sha256 vrf VRF1