Wired Intelligent Edge

 View Only

  • 1.  How to Enabling Specific Ciphers and MAC for SSH in my Aruba JL479A 8320 switch

    Posted Feb 07, 2022 02:18 AM
    Hi Team,

    Can any one please help me out how to enable or disable a specific ciphers and MAC for SSH in my Aruba JL479A 8320 switch which is running on ArubaOS-CX Version : TL.10.03.0071 .

    ------------------------------
    sanjib behera
    ------------------------------


  • 2.  RE: How to Enabling Specific Ciphers and MAC for SSH in my Aruba JL479A 8320 switch

    Posted Feb 07, 2022 02:33 AM
    Hi Sanjib,

    Since 10.05 AOS-CX offers two commands that seem to do what you are looking for: 'ssh ciphers' and 'ssh macs'. More details here - https://asp.arubanetworks.com/downloads/documents/RmlsZTpkZWJhNGI5YS1jODdiLTExZWEtOTk0MC0yMzZlMjYzY2FjMmY%3D


    ------------------------------
    Ivan Bondar
    ------------------------------



  • 3.  RE: How to Enabling Specific Ciphers and MAC for SSH in my Aruba JL479A 8320 switch

    Posted Feb 07, 2022 02:51 AM
    Hi Ivan,

    Can you let me know does this commands will work for me or not because my switch is running with 10.03 AOS-CX and i tried with same commands and it is not taking those.





    ------------------------------
    sanjib behera
    ------------------------------

    Original Message


  • 4.  RE: How to Enabling Specific Ciphers and MAC for SSH in my Aruba JL479A 8320 switch

    Posted Feb 07, 2022 02:54 AM
    Yes, Sanjib, the 10.03 is the reason. As I stated in my first reply - you need at least 10.05.

    ------------------------------
    Ivan Bondar
    ------------------------------

    Original Message


  • 5.  RE: How to Enabling Specific Ciphers and MAC for SSH in my Aruba JL479A 8320 switch

    Posted Feb 07, 2022 03:09 AM
    Hi Ivan,

    Thanks for the help.

    can you tell me which one is the stable AOS-CX version to upgrade my switch.

    ------------------------------
    sanjib behera
    ------------------------------

    Original Message


  • 6.  RE: How to Enabling Specific Ciphers and MAC for SSH in my Aruba JL479A 8320 switch

    Posted Feb 07, 2022 03:20 AM
    I suggest you first to read this document - https://www.arubanetworks.com/support-services/end-of-life/arubaos-software-release/

    then software development plan for AOS-CX - https://www.arubanetworks.com/support-services/end-of-life/


    And then make a choice according your needs here - https://asp.arubanetworks.com/downloads;pageIndex=1;search=8320;sort=VERSION_DESC;fileTypes=SOFTWARE;products=Aruba%20Switches;productSeries=Aruba%208320%20Switch%20Series


    ------------------------------
    Ivan Bondar
    ------------------------------

    Original Message


  • 7.  RE: How to Enabling Specific Ciphers and MAC for SSH in my Aruba JL479A 8320 switch

    Posted Feb 07, 2022 04:26 AM
    Edited by DP-7f7ca3 Feb 07, 2022 04:27 AM
    Hello Sanjib,

    on a updated AOS-CX (example below was taken on: AOS-CX 10.07) you have these SSH options:

    AOS-CX-10.7(config)# ssh
    ciphers                    Specify the ciphers for SSH to use.
    host-key                   SSH server host-keys.
    host-key-algorithms        Specify the accepted host key algorithms for SSH to use.
    key-exchange-algorithms    Specify the key exchange algorithms for SSH to use.
    known-host                 Client trusted servers list.
    macs                       Specify the MACs for SSH to use.
    maximum-auth-attempts      Configure the maximum number of authentication attempts (Default: 6).
    password-authentication    Password authentication method enabled by default.
    public-key-algorithms      Specify the accepted public key algorithms for SSH to use.
    public-key-authentication  Publickey authentication method enabled by default.
    server                     Configure SSH server.
    two-factor-authentication  Enable two factor authentication with X.509v3 certificate and password.

    If security matters to you, you should plan accordingly a series of upgrades to your platform leaving the two years old AOS-CX 10.03.0071 (January 2020) and moving to something newer than that (AOS-CX 10.03 could jump to 10.05, the AOS-CX 10.05 could jump to AOS-CX 10.07 and then, once in AOS-CX 10.07, you can leave your platform at latest AOS-CX 10.07 build or just continue and perform another step moving to AOS-CX 10.08 or, do the last big step, and jump directly from AOS-CX 10.07 to latest AOS-CX 10.09).

    ------------------------------
    Davide Poletto
    ------------------------------

    Original Message


Related Content