Specifying key exchange algorithms for SSH2

  1. Enter system view.

    system-view

  2. Specify key exchange algorithms for SSH2.

    In non-FIPS mode:

    ssh2 algorithm key-exchange { dh-group-exchange-sha1 | dh-group1-sha1 | dh-group14-sha1 | ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } *

    By default, SSH2 uses the ecdh-sha2-nistp256, ecdh-sha2-nistp384, dh-group-exchange-sha1, dh-group14-sha1, and dh-group1-sha1 key exchange algorithms in descending order of priority for algorithm negotiation.

    In FIPS mode:

    ssh2 algorithm key-exchange { dh-group14-sha1 | ecdh-sha2-nistp256 | ecdh-sha2-nistp384 } *

    By default, SSH2 uses the ecdh-sha2-nistp256, ecdh-sha2-nistp384, and dh-group14-sha1 key exchange algorithms in descending order of priority for algorithm negotiation.