Microsoft Virtualization Discussions

Can we make commandlet:InvokeSsh work with specific KEX and MAC algorithms?

rikv

Due to security requirements we've disabled diffie-hellman-group-exchange-sha256  and hmac-sha1 for ssh on ONTAP 9.7.

This makes that commandlet:InvokeSsh no longer works.

Is there a way to make InvokeSsh work with this ONTAP ssh config?

(e.g. Can we make it use another set of algorithms such as ecdh-sha2-nistp521, hmac-sha2-512?)

 

fwiw: On the ontap side:

cluster1::> security ssh remove -vserver xxx -key-exchange-algorithms diffie-hellman-group-exchange-sha256 -mac-algorithms hmac-sha1

0 REPLIES 0
Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public