Specifying key exchange algorithms for SSH2

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Specify key exchange algorithms for SSH2.

  • In non-FIPS mode:ssh2 algorithm key-exchange { dh-group-exchange-sha1 | dh-group14-sha1 | dh-group1-sha1 } *

  • In FIPS mode:ssh2 algorithm key-exchange dh-group14-sha1

  • In non-FIPS mode:
    By default, SSH2 uses the key exchange algorithms dh-group-exchange-sha1, dh-group14-sha1, and dh-group1-sha1 in descending order of priority for algorithm negotiation.

  • In FIPS mode:
    By default, SSH2 uses the key exchange algorithm dh-group14-sha1 for algorithm negotiation.