Administrator Guide

Parameters
mac mac-list
Enter the keyword mac then a space-delimited list of message authentication code
(MAC) algorithms supported by the SSH client. The following MAC algorithms are
available.
When FIPS mode is enabled:
● hmac-sha2–256
● hmac-sha1
● hmac-sha1–96
When FIPS mode is disabled:
● hmac-sha2-256
● hmac-sha1
● hmac-sha1–96
● hmac-md5
● hmac-md5-96
Defaults
The default list of MAC algorithm is in the order as shown below:
When FIPS mode is enabled:
● hmac-sha2–256
● hmac-sha1
● hmac-sha1–96
When FIPS mode is disabled:
● hmac-sha2-256
● hmac-sha1
●
hmac-sha1–96
● hmac-md5
● hmac-md5-96
Command Modes CONFIGURATION
Command
History
This guide is platform-specific. For command information about other platforms, see the relevant Dell
Networking OS Command Line Reference Guide.
Version Description
9.10(0.0) Introduced on the S6100–ON, S6000, S6000–ON, S5000, S4810, S4820T, S3048–
ON, S4048–ON, MXL, C9010, S3100 series, and Z9100-ON.
Usage
Information
● You can select one or more MAC algorithms from the list.
● Client-supported MAC list gets preference over the server-supported MAC list in selecting the MAC
algorithm for the SSH session.
● When the MAC (-m) option is used with the SSH CLI, it overrides the configured or default MAC list.
● When FIPS is enabled or disabled, the client MACs get default configuration.
ip ssh rekey
Configures the time rekey-interval or volume rekey-limit threshold at which to re-generate the SSH key during an SSH session.
C9000 Series
Syntax
ip ssh rekey [time rekey-interval] [volume rekey-limit]
To reset to the default, use no ip ssh rekey [time rekey-interval] [volume rekey-
limit] command.
Security 1569