HPE FlexNetwork 5510 HI Series Security Configuration Manual page 354

Task Command
domain-name } | prefer-compress zlib |
prefer-ctos-cipher { aes128-cbc | aes256-cbc
| aes128-ctr | aes192-ctr | aes256-ctr |
aes128-gcm |
prefer-ctos-hmac { sha1 | sha1-96 | sha2-256 |
sha2-512 } | prefer-kex { dh-group14-sha1 |
ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } |
prefer-stoc-cipher { aes128-cbc | aes256-cbc
| aes128-ctr | aes192-ctr | aes256-ctr |
aes128-gcm |
prefer-stoc-hmac { sha1 | sha1-96 | sha2-256 |
sha2-512 } ] * [ escape character | { public-key
keyname | server-pki-domain domain-name } |
source { interface
interface-number | ip ip-address } ] *
•
In non-FIPS mode, establish a connection to an
IPv6 Stelnet
ssh2 ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name
interface-number ] [ identity-key { dsa | ecdsa |
rsa | { x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp256 } pki-domain
domain-name } | prefer-compress zlib |
prefer-ctos-cipher { 3des-cbc | aes128-cbc |
aes256-cbc | des-cbc
aes192-ctr | aes256-ctr | aes128-gcm |
aes256-gcm } | prefer-ctos-hmac { md5 |
md5-96 | sha1 | sha1-96 | sha2-256 |
sha2-512 }
{ dh-group-exchange-sha1 | dh-group1-sha1
| dh-group14-sha1 | ecdh-sha2-nistp256 |
ecdh-sha2-nistp384 } | prefer-stoc-cipher
{ 3des-cbc | aes128-cbc | aes256-cbc |
des-cbc | aes128-ctr | aes192-ctr | aes256-ctr
| aes128-gcm
prefer-stoc-hmac { md5 | md5-96 | sha1 |
sha1-96 | sha2-256 | sha2-512 } ] * [ dscp
dscp-value | escape character | { public-key
keyname | server-pki-domain domain-name } |
source { interface
interface-number | ipv6 ipv6-address } ] *
•
In FIPS mode, establish a connection to an IPv6
Stelnet
ssh2 ipv6 server [ port-number ] [ vpn-instance
vpn-instance-name
interface-number ] [ identity-key { ecdsa | rsa |
{ x509v3-ecdsa-sha2-nistp384
x509v3-ecdsa-sha2-nistp256 } pki-domain
domain-name } | prefer-compress zlib |
prefer-ctos-cipher { aes128-cbc | aes256-cbc
| aes128-ctr | aes192-ctr | aes256-ctr |
aes128-gcm |
prefer-ctos-hmac { sha1 | sha1-96 | sha2-256 |
sha2-512 } | prefer-kex { dh-group14-sha1 |
ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } |
prefer-stoc-cipher { aes128-cbc | aes256-cbc
| aes128-ctr | aes192-ctr | aes256-ctr |
aes128-gcm |
prefer-stoc-hmac { sha1 | sha1-96 | sha2-256 |
sha2-512 } ] * [ escape character | { public-key
keyname | server-pki-domain domain-name } |
source { interface
interface-number | ipv6 ipv6-address } ] *
341
aes256-gcm }
aes256-gcm }
interface-type
server:
] [ -i interface-type
| aes128-ctr
| prefer-kex
| aes256-gcm }
interface-type
server:
] [ -i interface-type
aes256-gcm }
aes256-gcm }
interface-type
Remarks
|
|
|
|
|
|
|
|