Reference v4.1.0 Instruction Manual

1258 Network OS Command Reference

53-1003115-01

ssh server key-exchange dh-group-14

Specifies the method used for generating the one-time session keys for encryption and

authentication with the Secure Shell (SSH)server.

Synopsis ssh server key-exchange dh-group-14

no ssh server key-exchange dh-group-14

Operands None

Defaults This command is not configured as DH Group 14.

Command Modes Global configuration mode

RBridge ID configuration mode

Description Use this command to specify the method for generating the one-time session keys for encryption

and authentication with the SSH server. For information on DH Group 14, refer to RFC 3526.

You can configure the SSH server key-exchange method to DH Group 14. When the SSH server

key-exchange method is configured to DH Group 14, the SSH connection from a remote SSH client

is allowed only if the key-exchange method at the client end is also configured to DH Group 14.

Usage Guidelines Enter no ssh server key-exchange dh-group-14 to restore SSH server key-exchange to the default

value.

This command is not distributed across the cluster. The RBridge ID of the node should be used to

configure service on individual nodes.

Examples Standalone mode

To set SSH server key-exchange to DH Group 14:

switch(config)# ssh server key-exchange dh-group-14

To restore the SSH server key-exchange to default value:

switch(config)# no ssh server key-exchange dh-group-14

VCS mode

To set SSH server key-exchange to DH Group 14:

switch(config)# rbridge-id 3

switch(config-rbridge-id-3)# ssh server key-exchange dh-group-14

To restore the SSH server key-exchange to default value:

switch(config)# rbridge-id 3

switch(config-rbridge-id-3)# no ssh server key-exchange dh-group-14

See Also show running-config ssh server, show ssh server status