|
The default action in global setting ie 'enable' by default, it is possible to check using command 'get system global'.
get system global
.
.
ssh-kex-sha1 : enable
ssh-mac-weak : enable
It can be disabled using the commands below:
config system global
set ssh-key-sha disable
set ssh-mac-weak disable
end
The SSH daemon debug shown as below, all these versions and algorithms will be skipped and disallowed after disabling 'ssh-key-sha1' and 'ssh-mac-weak'.
diagnose debug application sshd -1
diagnose debug enable
.
.
SSH: Compat: skipping algorithm "diffie-hellman-group-exchange-sha1"
SSH: Compat: skipping algorithm "diffie-hellman-group14-sha1"
SSH: Compat: skipping algorithm "umac-64-etm@openssh.com"
SSH: Compat: skipping algorithm "hmac-sha1-etm@openssh.com"
SSH: Compat: skipping algorithm "hmac-sha1"
.
.
|
