Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring SSH on the Evaluated Configuration

    SSH is the only remote management interface allowed in the evaluated configuration. This topic describes how to configure SSH on the device.

    • Before you begin, log in with your root account on the device running Junos OS Release 15.1X49-D75 and edit the configuration.

    Note: You can enter the configuration commands in any order and commit all the commands at once.

    1. Specify the permissible SSH host-key algorithms for the system services.
      [edit system services]root@host# set ssh hostkey-algorithm ssh-ecdsa
    2. Specify the SSH key-exchange for Diffie-Hellman keys for the system services.
      [edit system services]root@host#set ssh key-exchange ecdh-sha2-nistp256
    3. Specify all the permissible message authentication code algorithms for SSHv2.
      [edit system services]root@host#set ssh macs hmac-sha1
    4. Specify the ciphers allowed for protocol version 2.
      [edit system services]root@host#set ssh ciphers aes128-cbc

    Modified: 2016-12-23