DWS-3160 Series Gigabit Ethernet Unified Switch CLI Reference Guide
574
Chapter 62
Secure Shell (SSH)
Command List
config ssh algorithm
[3DES | AES128 | AES192 | AES256 | arcfour | blowfish | cast128 |
twofish128 | twofish192 | twofish256 | MD5| SHA1 | RSA | DSA] [enable | disable]
show ssh algorithm
config ssh authmode
[password | publickey | hostbased] [enable | disable]
show ssh authmode
config ssh user
<username 15> authmode [hostbased [hostname <domain_name 32> |
hostname_IP <domain_name 32> [<ipaddr> | <ipv6addr>]] | password | publickey]
show ssh user authmode
config ssh server
{maxsession <int 1-8> | contimeout <sec 120-600> | authfail <int 2-20> | rekey
[10min | 30min | 60min | never] | port <tcp_port_number 1-65535>}
enable ssh
disable ssh
show ssh server
62-1
config ssh algorithm
Description
This command is used to configure the SSH service algorithm.
Format
config ssh algorithm [3DES | AES128 | AES192 | AES256 | arcfour | blowfish | cast128 |
twofish128 | twofish192 | twofish256 | MD5| SHA1 | RSA | DSA] [enable | disable]
Parameters
3DES
- The "3DES" cipher is three-key triple-DES (encrypt-decrypt-encrypt), where the first 8
bytes of the key are used for the first encryption, the next 8 bytes for the decryption, and the
following 8 bytes for the final encryption.
AES (128,192,256)
- Advanced Encryption Standard.
arcfour
- RC4 (also known as ARC4 or ARCFOUR meaning Alleged RC4) is the most widely-
used software stream cipher.
blowfish
- Blowfish is a keyed, symmetric block cipher.
cast128
- CAST-128 is a 12- or 16-round feistel network with a 64-bit block size and a key size of
between 40 to 128 bits.
twofish (128,192,256)
- Twofish has a 128-bit block size, a key size ranging from 128 to 256 bits.
MD5
- Message-Digest Algorithm 5.
SHA1
- Secure Hash Algorithm.
RSA
- RSA encryption algorithm is a non-symmetric encryption algorithm.
DSS
- Digital Signature Standard.
enable
- Enabled the algorithm.
disable
- Disables the algorithm.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.