Ssh server key-exchange dh-group-14 – Brocade Network OS Command Reference v4.1.0 User Manual

Page 1296

1258

Network OS Command Reference

53-1003115-01

ssh server key-exchange dh-group-14

Specifies the method used for generating the one-time session keys for encryption and
authentication with the Secure Shell (SSH)server.

Synopsis

ssh server key-exchange dh-group-14

no ssh server key-exchange dh-group-14

Operands

None

Defaults

This command is not configured as DH Group 14.

Command Modes

Global configuration mode

RBridge ID configuration mode

Description

Use this command to specify the method for generating the one-time session keys for encryption
and authentication with the SSH server. For information on DH Group 14, refer to RFC 3526.

You can configure the SSH server key-exchange method to DH Group 14. When the SSH server
key-exchange method is configured to DH Group 14, the SSH connection from a remote SSH client
is allowed only if the key-exchange method at the client end is also configured to DH Group 14.

Usage Guidelines

Enter no ssh server key-exchange dh-group-14 to restore SSH server key-exchange to the default
value.

This command is not distributed across the cluster. The RBridge ID of the node should be used to
configure service on individual nodes.

Examples

Standalone mode

To set SSH server key-exchange to DH Group 14:

switch(config)# ssh server key-exchange dh-group-14

To restore the SSH server key-exchange to default value:

switch(config)# no ssh server key-exchange dh-group-14

VCS mode

To set SSH server key-exchange to DH Group 14:

switch(config)# rbridge-id 3

switch(config-rbridge-id-3)# ssh server key-exchange dh-group-14

To restore the SSH server key-exchange to default value:

switch(config)# rbridge-id 3

switch(config-rbridge-id-3)# no ssh server key-exchange dh-group-14