H3C MSR 20-20, Справочник по командам

Страница: 2198 / 2742

2198 C
HAPTER
142: SSH2.0 C
ONFIGURATION
C
OMMANDS
Parameter server : IPv6 address or name of the server, a string of 1 to 46 characters.
port - number : Port number of the server, in the range 0 to 65535. The default is
22.
identity-key : Specifies the algorithm for publickey authentication, either dsa or
rsa . The default is dsa .
prefer-ctos-cipher : Preferred encryption algorithm from client to server, defaulted
to aes128 .
■
3des : Encryption algorithm 3des-cbc.
■
aes128 : Encryption algorithm aes128-cbc.
■
des : Encryption algorithm des-cbc.
prefer-ctos-hmac : Preferred HMAC algorithm from client to server, defaulted to
sha1 .
■
md5 : HMAC algorithm hmac-md5.
■
md5-96 : HMAC algorithm hmac-md5-96.
■
sha1 : HMAC algorithm hmac-sha1.
■
sha1-96 : HMAC algorithm hmac-sha1-96.
prefer-kex : Preferred key exchange algorithm, default to dh-group-exchange .
■
dh-group-exchange : Key exchange algorithm
diffie-hellman-group-exchange-sha1.
■
dh-roup1 : Key exchange algorithm diffie-hellman-group1-sha1.
■
dh-roup14 : Key exchange algorithm diffie-hellman-group14-sha1.
prefer-stoc-cipher : Preferred encryption algorithm from server to client,
defaulted to aes128 .
prefer-stoc-hmac : Preferred HMAC algorithm from server to client, defaulted to
sha1 .
Description Use the
ssh2 ipv6
command to establish a connection to an IPv6 SSH server and
specify the preferred key exchange algorithm, encryption algorithms, and HMAC
algorithms of the client and the server.
Note that when the client’s authentication method is publickey, the client needs to
get the local private key for validation. As the publickey authentication includes
RSA and DSA algorithms, you must specify an algorithm (by using the
identity-key keyword) in order to get the correct data for the local private key.
Example # Login to remote SSH2 server 2000::1, setting the algorithms as follows:
■
Preferred key exchange algorithm: dh-group1
■
Preferred encryption algorithm from server to client: AES128
■
Preferred HMAC algorithm from client to server: MD5