Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring SSH on the Evaluated Configuration

    SSH is the only remote management interface allowed in the evaluated configuration. This topic describes how to configure SSH on the device.

    • Before you begin, log in with your root account on the device running Junos OS Release 12.1X46-D20 and edit the configuration.

    Note: You can enter the configuration commands in any order and commit all the commands at once.

    1. Specify the permissible SSH host-key algorithms for the system services.
      [edit system services]root@host# set ssh hostkey-algorithm ssh-rsa
    2. Specify the SSH key-exchange for Diffie-Hellman keys for the system services.
      [edit system services]root@host#set ssh key-exchange dh-group14-sha1
    3. Specify all the permissible message authentication code algorithms for SSHv2.
      [edit system services]root@host#set ssh macs hmac-sha1
    4. Specify the ciphers allowed for protocol version 2.
      [edit system services]root@host#set ssh ciphers aes128-cbc aes256-cbc

    Modified: 2015-01-16