API Guide

● ecdh-sha2-nistp256
● ecdh-sha2-nistp384
● ecdh-sha2-nistp521
Default
● curve25519-sha256
● diffie-hellman-group14-sha1
● diffie-hellman-group-exchange-sha256
● ecdh-sha2-nistp256
● ecdh-sha2-nistp384
● ecdh-sha2-nistp521
Command Mode CONFIGURATION
Usage
Information
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S).
Also supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command removes the configuration.
Example
OS10(config)# ip ssh server kex curve25519-sha256 diffie-hellman-group1-
sha1
Supported
Releases
10.3.0E or later
ip ssh server mac
Configures the hash message authentication code (HMAC) algorithms used in the SSH server.
Syntax
ip ssh server mac hmac-algorithm
Parameters hmac-algorithm — Enter the supported HMAC algorithms separated by a blank space. The SSH
server supports these HMAC algorithms:
● hmac-md5
● hmac-md5-96
● hmac-ripemd160
● hmac-sha1
● hmac-sha1-96
● hmac-sha2-256
● hmac-sha2-512
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
Default
● hmac-sha1
● hmac-sha2-256
● hmac-sha2-512
● [e-mail]
● [e-mail]
● [e-mail]
● [e-mail]
1042 Security