Specifying key exchange algorithms for SSH2

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Specify key exchange algorithms for SSH2.

  • In non-FIPS mode:ssh2 algorithm key-exchange { dh-group-exchange-sha1 | dh-group1-sha1 | dh-group14-sha1 | ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } *

  • In FIPS mode:ssh2 algorithm key-exchange { dh-group14-sha1 | ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } *

  • In non-FIPS mode:
    By default, SSH2 uses the key exchange algorithms ecdh-sha2-nistp256, ecdh-sha2-nistp384, dh-group-exchange-sha1, dh-group14-sha1, and dh-group1-sha1 in descending order of priority for algorithm negotiation.

  • In FIPS mode:
    By default, SSH2 uses the key exchange algorithms ecdh-sha2-nistp256, ecdh-sha2-nistp384, and dh-group14-sha1 for algorithm negotiation.