• hmac-sha2-256-96When FIPS is enabled, the default HMAC algorithm is hmac-sha1-96.Example of Configuring a HMAC AlgorithmThe following example shows you how to configure a HMAC algorithm list.Dell(conf)# ip ssh server mac hmac-sha1-96Configuring the SSH Server Cipher ListTo configure the cipher list supported by the SSH server, use the ip ssh server cipher cipher-list command inCONFIGURATION mode.cipher-list-: Enter a space-delimited list of ciphers the SSH server will support.The following ciphers are available.• 3des-cbc• aes128-cbc• aes192-cbc• aes256-cbc• aes128-ctr• aes192-ctr• aes256-ctrThe default cipher list is 3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctrExample of Configuring a Cipher ListThe following example shows you how to configure a cipher list.Dell(conf)#ip ssh server cipher 3des-cbc aes128-cbc aes128-ctrSecure Shell AuthenticationSecure Shell (SSH) is enabled by default using the SSH Password Authentication method.Enabling SSH Authentication by PasswordAuthenticate an SSH client by prompting for a password when attempting to connect to the Dell Networking system. This setup isthe simplest method of authentication and uses SSH version 1.To enable SSH password authentication, use the following command.• Enable SSH password authentication.CONFIGURATION modeip ssh password-authentication enableExample of Enabling SSH Password AuthenticationTo view your SSH configuration, use the show ip ssh command from EXEC Privilege mode.Dell(conf)#ip ssh server enableDell(conf)#ip ssh password-authentication enableDell# show ip sshSSH server : enabled.SSH server version : v1 and v2.SSH server vrf : default.SSH server ciphers : 3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-Security 755
