show ssh-cipher

In the R81.10.X releases, this command is available starting from the R81.10.05 version.

Description

Starting in R81.10.x, OpenSSH is used for the SSH server (sshd) instead of Dropbear. OpenSSH enables you to configure which encryption algorithms to use for each stage of the connection, using a config file. Add/delete algorithms from a predefined list.

These are the encryption categories, each with multiple supported algorithms:

  • Kex - Key Exchange Algorithms, the key exchange methods that are used to generate per-connection keys.

  • Ciphers - The ciphers used to encrypt the connection.

  • MACs - Specifies the available MAC (message authentication code) algorithms.

Syntax

show ssh-cipher

Parameters

Parameter

Description

mac

  • hmac-sha1

  • hmac-sha2-256

  • hmac-sha2-512

Example Output

aes128-ctr

aes192-ctr

aes256-ctr