HP 5120 SI series Command Reference Manual page 262

ssh2 server [ port-number ] [ identity-key { dsa | rsa } | prefer-ctos-cipher { 3des | aes128 | des } |
prefer-ctos-hmac { md5 | md5-96 | sha1 | sha1-96 } | prefer-kex { dh-group-exchange | dh-group1
| dh-group14 } | prefer-stoc-cipher { 3des | aes128 | des } | prefer-stoc-hmac { md5 | md5-96 | sha1
| sha1-96 } ] *
In FIPS mode:
ssh2 server [ port-number ] [ identity-key rsa | prefer-ctos-cipher { aes128 | aes256 } |
prefer-ctos-hmac { sha1 | sha1-96 } | prefer-kex dh-group14 | prefer-stoc-cipher { aes128 | aes256 }
| prefer-stoc-hmac { sha1 | sha1-96 } ] *
View
User view
Default level
0: Visit level
Parameters
server: IPv4 address or host name of the server, a case-insensitive string of 1 to 20 characters.
port-number: Port number of the server, in the range 0 to 65535. The default is 22.
identity-key: Specifies the algorithm for publickey authentication, either dsa or rsa. The default is dsa.
prefer-ctos-cipher: Preferred encryption algorithm from client to server, defaulted to aes128.
• 3des: Encryption algorithm 3des-cbc.
aes128: Encryption algorithm aes128-cbc.
•
aes256: Encryption algorithm aes256-cbc.
•
des: Encryption algorithm des-cbc.
•
prefer-ctos-hmac: Preferred HMAC algorithm from client to server, defaulted to sha1-96.
md5: HMAC algorithm hmac-md5.
•
md5-96: HMAC algorithm hmac-md5-96.
•
• sha1: HMAC algorithm hmac-sha1.
sha1-96: HMAC algorithm hmac-sha1-96.
•
prefer-kex: Preferred key exchange algorithm, defaulted to dh-group-exchange in non-FIPS mode, and
dh-group14 in FIPS mode.
dh-group-exchange: Key exchange algorithm diffie-hellman-group-exchange-sha1.
•
dh-group1: Key exchange algorithm diffie-hellman-group1-sha1.
•
• dh-group14: Key exchange algorithm diffie-hellman-group14-sha1.
prefer-stoc-cipher: Preferred encryption algorithm from server to client, defaulted to aes128.
prefer-stoc-hmac: Preferred HMAC algorithm from server to client, defaulted to sha1-96.
Description
Use the ssh2 command to establish a connection to an IPv4 SSH server and specify the public key
algorithm, the preferred key exchange algorithm, and the preferred encryption algorithm and preferred
HMAC algorithm between the client and server.
When the client's authentication method is publickey, the client needs to get the local private key for
validation. As the publickey authentication includes RSA and DSA algorithms, you must specify an
251