Hi,
Looks like that R81.20 has some clish commads to enable cipher
show ssh server kex enabled
set ssh server kex <Key Exchange Algorithm> {on | off}
How to disable weak ssh cipher on R80.40/R81.10?
[Expert@firewallR8040# ssh -Q kex
diffie-hellman-group1-sha1
diffie-hellman-group14-sha1
diffie-hellman-group14-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group-exchange-sha1
diffie-hellman-group-exchange-sha256
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
curve25519-sha256
curve25519-sha256@libssh.org
Simply removing (#) from sshd_config ?
KexAlgorithms +diffie-hellman-group1-sha1
KexAlgorithms +diffie-hellman-group-exchange-sha1
If yes, will this survive reboot?
But will be overwritten with next hotfix?
Any ideas?
Thanks
Regards
