H3C SOHO IE4300, Command Reference Manual

Page: 2446 / 3296

62
Usage guidelines
Table 9 Suite B algorithms
Security
level Key exchange
algorithm Encryption algorithm
and HMAC algorithm
Public key algorithm
128-bit ecdh-sha2-nistp256 AES128-GCM x509v3-ecdsa-sha2-nistp256
192-bit ecdh-sha2-nistp384 AES256-GCM x509v3-ecdsa-sha2-nistp384
Both
ecdh-sha2-nistp256
ecdh-sha2-nistp384
AES128-GCM
AES256-GCM
x509v3-ecdsa-sha2-nistp256
x509v3-ecdsa-sha2-nistp384
The combination of an escape character and a dot (.) works as an escape sequence. This escape
sequence is typically used to quickly terminate an SSH connection when the server reboots or
malfunctions.
For the escape sequence to take effect, you must enter it at the very beginning of a line. If you have
entered other characters or performed operations in a line, enter the escape sequence in the next
line. As a best practice, use the default escape character (~). Do not use any character in SSH
usernames as the escape character.
Examples
# Use the 192-bit Suite B algorithms to establish a connection to Stelnet server 2000::1 . Specify the
client's PKI domain and the server's PKI domain as clientpkidomain and serverpkidomain ,
respectively.
<Sysname> ssh2 ipv6 2000::1 suite-b 192-bit pki-domain clientpkidomain server-pki-domain
serverpkidomain
Username
ssh2 suite-b
Use
ssh2 suite-b
to establish a connection to an IPv4 Stelnet server based on Suite B
algorithms.
Syntax
ssh2 server [ port-number ] [ vpn-instance vpn-instance-name ] suite-b
[ 128-bit | 192-bit ] pki-domain domain-name [ server-pki-domain
domain-name ] [ prefer-compress zlib ] [ dscp dscp-value | escape character |
source { interface interface-type interface-number | ip ip-address } ] *
Views
User view
Predefined user roles
network-admin
Parameters
server
: Specifies a server by its IPv4 address or host name, a case-insensitive string of 1 to 253
characters.
port-number
: Specifies the port number of the server, in the range 1 to 65535. The default is 22.
vpn-instance vpn-instance-name
: Specifies the MPLS L3VPN instance to which the server
belongs. The
vpn-instance-name
argument represents the VPN instance name, a
case-sensitive string of 1 to 31 characters.