ssh ciphers

描述

Configures SSH to use a set of ciphers in the specified priority order. Ciphers in SSH are used for privacy of data being transported over the connection. The first cipher type entered in the CLI is considered a first priority. Each option is an algorithm that is used to encrypt the link and each name indicates the algorithm and cryptographic parameters that are used. Only ciphers that are entered by the user are configured.

The没有form of this command removes the configuration of ciphers and reverts SSH to use the default set of ciphers.

Command context

config

Parameters

Valid cipher types are:

• aes128-cbc

• aes192-cbc

• aes256-cbc

• aes128-ctr

• aes192-ctr

• aes256-ctr

• aes128-gcm@openssh.com

• aes256-gcm@openssh.com

• chacha20-poly1305@openssh.com

Default set of ciphers in priority order:

1. chacha20-1305@openssh.com

2. aes128-ctr

3. aes192-ctr

4. aes256-ctr

5. aes128-gcm@openssh.com

6. aes256-gcm@openssh.com

权威

Administrators or local user group members with execution rights for this command.

Examples

Configuring SSH to use only specified ciphers in the priority order:

switch(config)#ssh ciphers chacha20-poly1305@openssh.com aes256-ctr aes256-cbc

Reverting SSH to use the default set of ciphers:

switch(config)#没有ssh ciphers