HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

The default setting is yes.

For example:

CheckHostIP yes

Cipher

Use this directive to specify the cipher to be used to encrypt SSH-1 sessions.

TIP: The blowfish, 3des, and des ciphers are supported. The des cipher is supported only

in the HP-UX Secure Shell client for interoperability with legacy SSH-1 protocol implementations

that do not support 3des. HP does not recommend using des.

The default setting is 3des.

For example:

Ciper 3des

Ciphers

Use this directive to specify the ciphers used by SSH-2 in the order of preference. Multiple ciphers

must be comma separated. The supported ciphers are as follows:

• 3des-cbc

• aes128-cbc

• aes192-cbc

• aes256-cbc

• aes128-ctr

• aes192-ctr

• aes256-ctr

• arcfour128

• arcfour256

• arcfour

• blowfish-cbc

• cast128-cbc

The default setting is

aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,

aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr.

For example:

Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc

ClearAllForwardings

Use this directive to specify that all local, remote, and dynamic port forwardings in the configuration

files or on the command line be cleared. This option can be used to clear port forwarding set in

configuration files. It is automatically set by the scp and sftp commands.

The default is setting no.

For example:

ClearAllForwardings yes

Compression

Use this directive to specify whether to use compression. Setting this directive to yes can improve

speed over slower lines. Compression can also reduce delays because of encryption.

Client Configuration Directives 85