NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled.
We're excited to launch our new Community experience on July 30 and more information will follow soon.
Stay connected during the transition - Join our Discord community today.

Microsoft Virtualization Discussions

Can we make commandlet:InvokeSsh work with specific KEX and MAC algorithms?

rikv
1,920 Views

Due to security requirements we've disabled diffie-hellman-group-exchange-sha256  and hmac-sha1 for ssh on ONTAP 9.7.

This makes that commandlet:InvokeSsh no longer works.

Is there a way to make InvokeSsh work with this ONTAP ssh config?

(e.g. Can we make it use another set of algorithms such as ecdh-sha2-nistp521, hmac-sha2-512?)

 

fwiw: On the ontap side:

cluster1::> security ssh remove -vserver xxx -key-exchange-algorithms diffie-hellman-group-exchange-sha256 -mac-algorithms hmac-sha1

0 REPLIES 0
Public