Cisco Nexus 9000 Series Configuration Manual page 168

Configuring Legacy SSH Algorithm Support
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
switch(config)#?
Step 2
(Optional) ssh kexalgos all
Example:
switch(config)# ssh kexalgos all
Step 3 (Optional) ssh macs all
Example:
switch(config)# ssh macs all
Step 4 (Optional) ssh ciphers all
Example:
switch(config)# ssh ciphers all
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
142
Purpose
Enters the global configuration mode.
Enables all supported KexAlgorithms which are the key
exchange methods that are used to generate per-connection
keys.
Supported KexAlgorithmns are:
• curve25519-sha256
• diffie-hellman-group-exchange-sha256
• diffie-hellman-group14-sha1
• diffie-hellman-group1-sha1
• ecdh-sha2-nistp256
• ecdh-sha2-nistp384
• ecdh-sha2-nistp521
Enables all supported MACs which are the message
authentication codes used to detect traffic modification.
Supported MACs are:
• hmac-sha1
• hmac-sha2-256
• hmac-sha2-512
Enables all supported ciphers to encrypt the connection.
Supported ciphers are:
• aes128-cbc
• aes192-cbc
• aes256-cbc
• aes128-ctr
• aes192-ctr
• aes256-ctr
• aes256-gcm@openssh.com
• aes128-gcm@openssh.com
Configuring SSH and Telnet