Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Can we make commandlet:InvokeSsh work with specific KEX and MAC algorithms?
2020-10-20
08:13 AM
1,619 Views
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Due to security requirements we've disabled diffie-hellman-group-exchange-sha256 and hmac-sha1 for ssh on ONTAP 9.7.
This makes that commandlet:InvokeSsh no longer works.
Is there a way to make InvokeSsh work with this ONTAP ssh config?
(e.g. Can we make it use another set of algorithms such as ecdh-sha2-nistp521, hmac-sha2-512?)
fwiw: On the ontap side:
cluster1::> security ssh remove -vserver xxx -key-exchange-algorithms diffie-hellman-group-exchange-sha256 -mac-algorithms hmac-sha1
0 REPLIES 0
