H3C S7500 Series Ethernet Switches Command Manual

Table Of Contents
Command Manual – SSH Terminal Service
H3C S7500 Series Ethernet Switches
Chapter 1 SSH Terminal Service
Configuration Commands
1-24
prefer_kex: Preferential key exchange algorithm. Choose one of the two available
algorithms.
dh_group1: Diffie-Hellman-group1-sha1 key exchange algorithm. It is the default
algorithm.
dh_exchange_group: Diffie-Hellman-group-exchange-sha1 key exchange algorithm.
prefer_ctos_cipher: Preferential encryption algorithm from the client to server. It
defaults to AES128.
prefer_stoc_cipher: Preferential encryption algorithm from the server to client. It
defaults to AES128.
des: DES_cbc encryption algorithm.
aes128: AES_128 encryption algorithm.
prefer_ctos_hmac: Preferential HMAC algorithm from the client to server. It defaults to
SHA1_96.
prefer_stoc_hmac: Preferential HMAC algorithm from the server to client. It defaults to
SHA1_96.
sha1: HMAC-SHA1 algorithm.
sha1_96: HMAC-SHA1_96 algorithm.
md5: HMAC-MD5 algorithm.
md5_96: HMAC-MD5-96 algorithm.
Note:
z Data encryption standard (DES) is the standard algorithm for data encryption.
z Advanced encryption standard (AES) is the advanced encryption standard
algorithm.
Description
Use the ssh2 command to enable the connection between SSH client and server,
define preferential key exchange algorithm, preferential encryption algorithm and
preferential HMAC algorithm on the server and client.
Examples
# Log in to the remote SSH2.0 server with IP address 10.1.1.2 and adopt the default
encryption algorithm.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] ssh2 10.1.1.2