Cipherset – Brocade Network OS Command Reference v4.1.0 User Manual

Page 118

Network OS Command Reference

53-1003115-01

cipherset

Configures FIPS-compliant ciphers for LDAP and SSH protocols.

Synopsis

cipherset {ldap | ssh}

Operands

ldap

Specifies secure LDAP ciphers.

ssh

Specifies secure SSH ciphers.

Defaults

There are no restrictions on LDAP and SSH ciphers.

Command Modes

Privileged EXEC mode

Description

Use this command to configure secure ciphers that are FIPS compliant for the Lightweight
Directory Access Protocol (LDAP) and Secure Shell (SSH). A switch must be configured with secure
ciphers for SSH before that switch can be FIPS compliant. If LDAP authentication is to be used, the
LDAP ciphers are also required before a switch can be FIPS compliant.

The secure LDAP ciphers are AES256-SHA, EAS128-SHA, and DES-CBC3-SHA. The secure SSH
ciphers are HMAC-SHA1 (mac), 3DES-CBC, AES128-CBC, AES192-CBC, and AES256-CBC.

Usage Guidelines

This command applies only in the standalone mode. This command can be entered only from a
user account with the admin role assigned.

Examples

To configure secure LDAP ciphers:

switch# cipherset ldap

ldap cipher list configured successfully

To configure secure SSH ciphers:

switch# cipherset ssh

ssh cipher list configured successfully