719SyntaxIn non-FIPS mode:ssh2 algorithm key-exchange { dh-group-exchange-sha1 | dh-group14-sha1 |dh-group1-sha1 } *undo ssh2 algorithm key-exchangeIn FIPS mode:ssh2 algorithm key-exchange dh-group14-sha1undo ssh2 algorithm key-exchangeDefaultIn non-FIPS mode:SSH2 uses the key exchange algorithms dh-group-exchange-sha1, dh-group14-sha1, anddh-group1-sha1 in descending order of priority for algorithm negotiation.In FIPS mode:SSH2 uses the key exchange algorithm dh-group14-sha1 for algorithm negotiation.ViewsSystem viewPredefined user rolesnetwork-adminParametersdh-group-exchange-sha1: Specifies the key exchange algorithmdiffie-hellman-group-exchange-sha1.dh-group14-sha1: Specifies the key exchange algorithm diffie-hellman-group14-sha1.dh-group1-sha1: Specifies the key exchange algorithm diffie-hellman-group1-sha1.Usage guidelinesIf you specify the key exchange algorithms, SSH2 uses only the specified algorithms for algorithmnegotiation. The algorithm specified earlier has a higher priority during negotiation.Examples# Specify the algorithm dh-group1-sha1 as the key exchange algorithm for SSH2. system-view[Sysname] ssh2 algorithm key-exchange dh-group1-sha1Related commandsdisplay ssh2 algorithmssh2 algorithm cipherssh2 algorithm macssh2 algorithm public-keyssh2 algorithm macUse ssh2 algorithm mac to specify MAC algorithms for SSH2.Use undo ssh2 algorithm mac to restore the default.
