Huawei Quidway S8500 Series, Руководство по управлению

Страница: 1168 / 1341

Command Manual – System Management
Quidway S8500 Series Routing Switches Chapter 8 SSH Terminal Service Configuration
Commands
Huawei Technologies Proprietary
8-19
prefer_kex : Preferred key exchange algorithm, which can be one of the two
algorithms.
dh_group1 : Key exchange algorithm diffie-hellman-group1-sha1, which is the default
algorithm.
dh_exchange_group : Key exchange algorithm diffie-hellman-group-exchange-sha1.
prefer_ctos_cipher : Preferred encryption algorithm from the client to the server. The
default algorithm is aes128.
prefer_stoc_cipher : Preferred encryption algorithm from the server to the client. The
default algorithm is aes128.
des : Encryption algorithm des_cbc.
3des : Encryption algorithm 3des_cbc.
aes128 : Encryption algorithm aes_128.
prefer_ctos_hmac : Preferred HMAC algorithm from the client to the server. The
default algorithm is sha1_96.
prefer_stoc_hmac : Preferred HMAC algorithm from the server to the client. The
default algorithm is sha1_96.
sha1 : HMAC algorithm hmac-sha1.
sha1_96 : HMAC algorithm hmac-sha1-96.
md5 : HMAC algorithm hmac-md5.
md5_96 : HMAC algorithm hmac-md5-96.
Description
Use the ssh2 command to enable the connection between the SSH client and the
server, and specify the preferred key exchange algorithm, encryption algorithm and
HMAC algorithm of the client and the server.
Example
# Log in to remote SSH2 server with IP address 10.214.50.51, and configure encryption
algorithms as follows:
z
Preferred key exchange algorithm: dh_exchange_group
z
Preferred encryption algorithm from the client to the server: 3DES-CBC
z
Preferred HMAC algorithm from the client to the server: HMAC-MD5
z
Preferred encryption algorithm from the server to the client: AES-128
z
Preferred HMAC algorithm from the server to the client: HMAC-SHA1-96
The command is as follows:
<Quidway> system-view
System View: return to User View with Ctrl+Z.