Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Related Documentation


    Configuring SSH on the Target of Evaluation

    SSH is the only remote management interface allowed in the Common Criteria certified configuration. This topic describes how to configure SSH on the TOE.

    • Before you begin, log in with your root account to an SRX Series device running Junos OS Release 12.1X44-D15.

    Note: You can enter the configuration commands in any order and commit all the commands at once.

    1. Specify the permissible SSH host-key algorithms for the system services.
      [edit system services]root@host# set ssh hostkey-algorithm ssh-rsa
    2. Specify the SSH key-exchange for Diffie-Hellman keys for the system services.
      [edit system services]root@host#set ssh key-exchange dh-group14-sha1
    3. Specify all the permissible message authentication code algorithms for SSHv2.
      [edit system services]root@host#set ssh macs hmac-sha1
    4. Specify the ciphers allowed for protocol version 2.
      [edit system services]root@host#set ssh ciphers aes128-cbc aes256-cbc

    Related Documentation


    Published: 2013-12-10