R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Command Reference-6PW101

203
Preferred al
g
orithm In non-FIPS mode In FIPS mode
Server-to-client preferred HMAC algorithm
sha1-96 sha1-96
Examples
# Log in to remote SSH2.0 server 10.214.50.51, using the following algorithms:
• Preferred key exchange algorithm: DH-group1
• Preferred encryption algorithm from server to client: AES128
• Preferred HMAC algorithm from client to server: MD5
• Preferred HMAC algorithm from server to client: SHA1-96
<Sysname> ssh2 10.214.50.51 prefer-kex dh-group1 prefer-stoc-cipher aes128
prefer-ctos-hmac md5 prefer-stoc-hmac sha1-96
ssh2 ipv6
Syntax
In non-FIPS mode:
ssh2 ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ] [ identity-key { dsa | rsa } |
prefer-ctos-cipher { 3des | aes128 | aes256 | des } | prefer-ctos-hmac { md5 | md5-96 | sha1 |
sha1-96 } | prefer-kex { dh-group-exchange | dh-group1 | dh-group14 } | prefer-stoc-cipher { 3des |
aes128 | aes256 | des } | prefer-stoc-hmac { md5 | md5-96 | sha1 | sha1-96 } ] *
In FIPS mode:
ssh2 ipv6 server [ port-number ] [ vpn-instance vpn-instance-name ] [ identity-key rsa |
prefer-ctos-cipher { aes128 | aes256 } | prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex dh-group14
| pr
efer-stoc-cipher { aes128 | aes256 } | prefer-stoc-hmac { sha1 | sha1-96 } ] *
View
User view
Default level
0: Visit level
Parameters
server: IPv6 address or host name of the server, a case-insensitive string of 1 to 46 characters.
port-number: Port number of the server, in the range 0 to 65535. The default is 22.
vpn-instance vpn-instance-name: Specifies the VPN that the server belongs to, where vpn-instance-name
is a case-sensitive string of 1 to 31 characters. If the server is on the public network, do not specify this
option.
identity-key: Specifies the algorithm for publickey authentication, either dsa or rsa. The default is dsa.
prefer-ctos-cipher: Preferred encryption algorithm from client to server, defaulted to aes128.
• 3des: Encryption algorithm 3des-cbc.
• aes128: Encryption algorithm aes128-cbc.
• aes256: Encryption algorithm aes256-cbc.
• des: Encryption algorithm des-cbc.
prefer-ctos-hmac: Preferred HMAC algorithm from client to server, defaulted to sha1-96.