3Com MSR 30, MSR 50 manual SSH2.0 Configuration Commands

2198 CHAPTER 142: SSH2.0 CONFIGURATION COMMANDS

Parameter server: IPv6 address or name of the server, a string of 1 to 46 characters.

port-number: Port number of the server, in the range 0 to 65535. The default is 22.

identity-key: Specifies the algorithm for publickey authentication, either dsa or rsa. The default is dsa.

prefer-ctos-cipher: Preferred encryption algorithm from client to server, defaulted to aes128.

■3des: Encryption algorithm 3des-cbc.

■aes128: Encryption algorithm aes128-cbc.

■des: Encryption algorithm des-cbc.

prefer-ctos-hmac: Preferred HMAC algorithm from client to server, defaulted to sha1.

■md5: HMAC algorithm hmac-md5.

■md5-96: HMAC algorithm hmac-md5-96.

■sha1: HMAC algorithm hmac-sha1.

■sha1-96: HMAC algorithm hmac-sha1-96.

prefer-kex: Preferred key exchange algorithm, default to dh-group-exchange.

■dh-group-exchange: Key exchange algorithm diffie-hellman-group-exchange-sha1.

■dh-roup1: Key exchange algorithm diffie-hellman-group1-sha1.

■dh-roup14: Key exchange algorithm diffie-hellman-group14-sha1.

prefer-stoc-cipher: Preferred encryption algorithm from server to client, defaulted to aes128.

prefer-stoc-hmac: Preferred HMAC algorithm from server to client, defaulted to sha1.

Description Use the ssh2 ipv6 command to establish a connection to an IPv6 SSH server and specify the preferred key exchange algorithm, encryption algorithms, and HMAC algorithms of the client and the server.

Note that when the client’s authentication method is publickey, the client needs to get the local private key for validation. As the publickey authentication includes RSA and DSA algorithms, you must specify an algorithm (by using the identity-keykeyword) in order to get the correct data for the local private key.

Example # Login to remote SSH2 server 2000::1, setting the algorithms as follows:

■Preferred key exchange algorithm: dh-group1

■Preferred encryption algorithm from server to client: AES128

■Preferred HMAC algorithm from client to server: MD5