HP E4510-48G, Command Reference Manual

Page: 756 / 1334

10-13
Default Level
0: Visit level
Parameters
server : IPv4 address or host name of the server, a case-insensitive string of 1 to 20 characters.
port-number : Port number of the server, in the range 0 to 65535. The default is 22.
identity-key : Specifies the algorithm for publickey authentication, either dsa or rsa . The default is dsa .
prefer-ctos-cipher : Preferred encryption algorithm from client to server, defaulted to aes128 .
z
aes128 : Encryption algorithm aes128-cbc
z
des : Encryption algorithm des-cbc.
prefer-ctos-hmac : Preferred HMAC algorithm from client to server, defaulted to sha1 .
z
md5 : HMAC algorithm hmac-md5.
z
md5-96 : HMAC algorithm hmac-md5-96.
z
sha1 : HMAC algorithm hmac-sha1.
z
sha1-96 : HMAC algorithm hmac-sha1-96.
prefer-kex : Preferred key exchange algorithm, defaulted to dh-group-exchange .
z
dh-group-exchange : Key exchange algorithm diffie-hellman-group-exchange-sha1.
z
dh-group1 : Key exchange algorithm diffie-hellman-group1-sha1.
z
dh-group14 : Key exchange algorithm diffie-hellman-group14-sha1.
prefer-stoc-cipher : Preferred encryption algorithm from server to client, defaulted to aes128 .
prefer-stoc-hmac : Preferred HMAC algorithm from server to client, defaulted to sha1 .
Description
Use the ssh2 command to establish a connection to an IPv4 SSH server and specify the public key
algorithm, the preferred key exchange algorithm, and the preferred encryption algorithms and
preferred HMAC algorithms between the client and server.
Note that when the client’s authentication method is publickey, the client needs to get the local private
key for validation. As the publickey authentication includes RSA and DSA algorithms, you must specify
an algorithm (by using the identity-key keyword) in order to get the correct data for the local private
key. By default, the encryption algorithm is DSA.
Examples
# Log in to remote SSH2.0 server 10.214.50.51, using the following algorithms:
z
Preferred key exchange algorithm: DH-group1
z
Preferred encryption algorithm from server to client: AES128
z
Preferred HMAC algorithm from client to server: MD5
z
Preferred HMAC algorithm from server to client: SHA1-96.
<Sysname> ssh2 10.214.50.51 prefer-kex dh-group1 prefer-stoc-cipher aes128 prefer-ctos-hmac
md5 prefer-stoc-hmac sha1-96