129
To do...
Use the command…
Remarks
encryption
algorithms,
preferred HMAC
algorithms and
preferred key
exchange
algorithm
For an
IPv6 server
ssh2
ipv6
server
[
port-number
] [
identity-key
{
dsa
|
rsa
} |
prefer-ctos-cipher
{
3des
|
aes128
|
des
} |
prefer-ctos-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
} |
prefer-kex
{
dh-group-
exchange
|
dh-group1
|
dh-group14
} |
prefer-stoc-cipher
{
3des
|
aes128
|
des
} |
prefer-stoc-hmac
{
md5
|
md5-96
|
sha1
|
sha1-96
} ] *
Displaying and maintaining SSH
To do…
Use the command…
Remarks
1.
Display the source IP address or
interface currently set for the SFTP
client
display sftp client source
Available in any view
2.
Display the source IP address or
interface currently set for the SSH client
display ssh client source
Available in any view
3.
Display SSH server status information
or session information on an SSH
server
display ssh server
{
status
|
session
}
Available in any view
4.
Display the mappings between SSH
servers and their host public keys
saved on an SSH client
display ssh server-info
Available in any view
5.
Display information about a specified
or all SSH users on the SSH server
display ssh user-information
[
username
]
Available in any view
6.
Display the public keys of the local key
pairs
display public-key local
{
dsa
|
rsa
}
public
Available in any view
7.
Display the public keys of the SSH
peers
display public-key peer
[
brief
|
name
publickey-name
]
Available in any view
For information about the
display public-key local
and
display public-key peer
commands, see
Public Key
in the
Security Command Reference
.
SSH server configuration examples
By default, Ethernet interfaces, VLAN interfaces, and aggregate interfaces are in the state of DOWN. To
configure such an interface, use the
undo shutdown
command to bring it up first.
