Dell MX9116n EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 1001

SSH commands crypto ssh-key generate Regenerates the public keys used in SSH authentication. Syntax Parameters crypto ssh-key generate {rsa bits | ecdsa bits | ed25519} • rsa bits - Regenerates the RSA key with the specified bit size: 2048, 3072, or 4096; default 2048. • ecdsa bits - Regenerates the ECDSA key with the specified bit size: 256, 384, or 521; default 256. • ed25519 - Regenerates the Ed25519 key with the default bit size. Default The SSH server uses default public key lengths for client authentication: • RSA key: 2048 bits • ECDSA key : 256 bits • Ed25519 key: 256 bits Command Mode EXEC Usage Information If necessary, you can regenerate the public keys used by the SSH server with a customized bit size. You cannot change the default size of the Ed25519 key. The crypto ssh-key generate command is available only to the sysadmin and secadmin roles. Example OS10# crypto ssh-key generate rsa 4096 Host key already exists. Overwrite [confirm yes/no]:yes Generated 4096-bit RSA key OS10# Supported Releases 10.4.1.0 or later ip ssh server challenge-response-authentication Enables challenge response authentication in the SSH server. Syntax ip ssh server challenge-response-authentication Parameters None Default Disabled Command Mode CONFIGURATION Usage Information Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S). Also supported in SmartFabric mode starting in release 10.5.0.1. The no version of this command disables the challenge response authentication. Example OS10(config)# ip ssh server challenge-response-authentication Supported Releases 10.3.0E or later ip ssh server cipher Configures the list of cipher algorithms in the SSH server. Syntax Parameters ip ssh server cipher cipher-list cipher-list - Enter a list of cipher algorithms. Separate entries with a blank space. The cipher algorithms supported by the SSH server are: • 3des-cbc • aes128-cbc Security 1001