Administrator Guide

RSA Authentication : disabled.
Vty Encryption HMAC Remote IP
0 aes128-ctr hmac-md5 10.16.150.185
With FIPS Mode enabled:
Dell#show ip ssh
SSH server : enabled.
SSH server version : v2.
SSH server vrf : default.
SSH server ciphers : aes256-ctr,aes256-cbc,aes192-ctr,aes192-
cbc,aes128-ctr,aes128-cbc,3des-cbc.
SSH server macs : hmac-sha2-256,hmac-sha1,hmac-sha1-96.
SSH server kex algorithms : diffie-hellman-group14-sha1.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA Authentication : disabled.
Vty Encryption HMAC Remote IP
0 aes128-ctr hmac-sha1 10.16.150.185
Dell(conf)#
ssh
Open an SSH connection specifying the hostname, username, port number, and version of the SSH client.
C9000 Series
Syntax
ssh {hostname|ipv4 address|ipv6 address} [-c encryption cipher|-l username|-m
HMAC alogorithm|-p port-number|-v {1|2}]
Parameters
hostname (OPTIONAL) Enter the IP address or the hostname of the remote device.
ipv4 address (OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
ipv6 addressprefix (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in
the /x format. The range is from /0 to /128
NOTE: The :: notation specifies successive hexadecimal fields of zeros.
-c encryption
cipher
Enter the following encryption cipher to use. (For v2 clients only.)
Without the FIPS mode enabled:
aes256-ctr : Force ssh to use the aes256-ctr encryption cipher.
aes256-cbc : Force ssh to use the aes256-cbc encryption cipher.
aes192-ctr : Force ssh to use the aes192-ctr encryption cipher.
aes192-cbc : Force ssh to use the aes192-cbc encryption cipher.
aes128-ctr : Force ssh to use the aes192-ctr encryption cipher.
aes128-cbc : Force ssh to use the aes192-cbc encryption cipher.
3des-cbc : Force ssh to use 3des-cbc encryption cipher.
With the FIPS mode enabled:
aes256-ctr : Force ssh to use the aes256-ctr encryption cipher.
aes256-cbc : Force ssh to use the aes256-cbc encryption cipher.
aes192-ctr : Force ssh to use the aes192-ctr encryption cipher.
aes192-cbc : Force ssh to use the aes192-cbc encryption cipher.
aes128-ctr : Force ssh to use the aes192-ctr encryption cipher.
aes128-cbc : Force ssh to use the aes192-cbc encryption cipher.
3des-cbc : Force ssh to use 3des-cbc encryption cipher.
-l username (OPTIONAL) Enter the keyword —l then the user name used in this SSH session. The
default is the user name of the user associated with the terminal.
FIPS Cryptography 645