Huawei Quidway S3900 series Command Manual page 955

Command Manual –SSH Terminal Service
Quidway S3900 Series Ethernet Switches-Release 1510
prefer_kex: Key exchange algorithm preference. Choose one of the two algorithms
available.
dh_group1: Diffie-Hellman-group1-sha1 key exchange algorithm. It is the default
algorithm.
dh_exchange_group: Diffie-Hellman-group-exchange-sha1 key exchange algorithm.
prefer_ctos_cipher: Encryption algorithm preference from the client to server. It
defaults to AES128.
prefer_stoc_cipher: Encryption algorithm preference from the server to client. It
defaults to AES128.
des: DES_cbc encryption algorithm.
aes128: AES_128 encryption algorithm.
prefer_ctos_hmac: HMAC algorithm preference from the client to server. It defaults to
SHA1_96.
prefer_stoc_hmac: HMAC algorithm preference from the server to client. It defaults to
SHA1_96.
sha1: HMAC-SHA1 algorithm.
sha1_96: HMAC-SHA1_96 algorithm.
md5: HMAC-MD5 algorithm.
md5_96: HMAC-MD5-96 algorithm.
Note:
DES (Data Encryption Standard) is the standard algorithm for data encryption.
AES (Advanced Encryption Standard) is the advanced encryption standard
algorithm.
Description
Use the ssh2 command to enable the connection between SSH client and server,
define key exchange algorithm preference, encryption algorithm preference and HMAC
algorithm preference on the server and client.
Example
# Log into the SSHv2.0 server with IP address 10.214.50.51 and make these settings:
Key exchange algorithm preference as dh_exchange_group
encryption algorithm preference from the server to client as aes128
HMAC algorithm preference from the client to server as md5
HMAC algorithm preference from the server to client as sha1_96
Huawei Technologies Proprietary
1-26
Chapter 1 SSH Terminal Service
Configuration Commands