API Guide
Supported
Releases
10.4.1.0 or later
ip ssh server challenge-response-authentication
Enables challenge response authentication in the SSH server.
Syntax
ip ssh server challenge-response-authentication
Parameters None
Default Disabled
Command Mode CONFIGURATION
Usage
Information
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S).
Also supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command disables the challenge response authentication.
Example
OS10(config)# ip ssh server challenge-response-authentication
Supported
Releases
10.3.0E or later
ip ssh server cipher
Configures the list of cipher algorithms in the SSH server.
Syntax
ip ssh server cipher cipher-list
Parameters cipher-list — Enter a list of cipher algorithms. Separate entries with a blank space. The cipher
algorithms supported by the SSH server are:
● 3des-cbc
● aes128-cbc
● aes192-cbc
● aes256-cbc
● aes128-ctr
● aes192-ctr
● aes256-ctr
● aes128-gcm@openssh.com
● aes256-gcm@openssh.com
● blowfish-cbc
● cast128-cbc
● chacha20-poly1305@opens
Default
● aes128-ctr
● aes192-ctr
● aes256-ctr
● aes128-gcm@openssh.com
● aes256-gcm@openssh.com
● chacha20-poly1305@opens
Command Mode CONFIGURATION
Usage
Information
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S).
Also supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command removes the configuration.
Example
OS10(config)# ip ssh server cipher 3des-cbc aes128-cbc
1040 Security