Ssh - Dell C9000 Series Reference Manual

With FIPS Mode enabled:
Dell#show ip ssh
SSH server
SSH server version
SSH server vrf
SSH server ciphers
ctr,aes192-cbc,aes128-ctr,aes128-cbc,3des-cbc.
SSH server macs
SSH server kex algorithms : diffie-hellman-group14-sha1.
Password Authentication
Hostbased Authentication
RSA
Dell(conf)#

ssh

Open an SSH connection specifying the hostname, username, port number, and version of the SSH client.
C9000 Series
Syntax
ssh {hostname|ipv4 address|ipv6 address} [-c encryption cipher|-l
username|-m HMAC alogorithm|-p port-number|-v {1|2}]
Parameters
hostname
ipv4 address
ipv6 addressprefix
-c encryption
cipher
Authentication
Vty Encryption
0 aes128-ctr
(OPTIONAL) Enter the IP address or the hostname of the remote
device.
(OPTIONAL) Enter the IP address in dotted decimal format
A.B.C.D.
(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then
the prefix length in the /x format. The range is from /0 to /128
Enter the following encryption cipher to use. (For v2 clients
only.)
Without the FIPS mode enabled:
• aes256-ctr : Force ssh to use the aes256-ctr encryption
cipher.
• aes256-cbc : Force ssh to use the aes256-cbc encryption
cipher.
• aes192-ctr : Force ssh to use the aes192-ctr encryption
cipher.
: enabled.
: v2.
: default.
: aes256-ctr,aes256-cbc,aes192-
: hmac-sha2-256,hmac-sha1,hmac-sha1-96.
: enabled.
: disabled.
: disabled.
HMAC
hmac-sha1
NOTE: The :: notation specifies successive hexadecimal
fields of zeros.
Remote IP
10.16.150.185
FIPS Cryptography 873