How to disable weak ssh cipher on R80.40/R81.10?

[S_E_]

Hi,

Looks like that R81.20 has some clish commads to enable cipher
show ssh server kex enabled
set ssh server kex <Key Exchange Algorithm> {on | off}

How to disable weak ssh cipher on R80.40/R81.10?

[Expert@firewallR8040# ssh -Q kex
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group14-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group-exchange-sha1
diffie-hellman-group-exchange-sha256
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
curve25519-sha256
curve25519-sha256@libssh.org

Simply removing (#) from sshd_config ?
KexAlgorithms +diffie-hellman-group1-sha1
KexAlgorithms +diffie-hellman-group-exchange-sha1

If yes, will this survive reboot?
But will be overwritten with next hotfix?

Any ideas? 

Thanks
Regards

[G_W_Albrecht · Accepted solution]

sk106031: How to change SSH encryption protocols and Message Authentication Code settings

sk165685: Supported SSH Traffic Ciphers

[_Val_ · Accepted solution]

Please follow sk106031

[S_E_]

Perfect, Thanks