ssh server cipher-list ＜cipher list＞

Specifies the list of cipher suites and MAC and KEX algorithms to be used for an SSH server.

Syntax

ssh server cipher-list {fips | cc-ndcpp | fips-and-cc-ndcpp | fips-high-security | cc-ndcpp-high-security | fips-and-cc-ndcpp-high-security | compatible}

no ssh server cipher-list

Parameters

no

Use the no form of this command to reset the cipher list to the default setting (compatible).

fips

Compliant with FIPS.

cc-ndcpp

Compliant with CC-NDPP.

fips-and-cc-ndcpp

Compliant with both FIPS and CC-NDPP.

fips-high-security

Compliant with FIPS and excludes low-security ciphers.

cc-ndcpp-high-security

Compliant with CC-NDPP and excludes low-security ciphers.

fips-and-cc-ndcpp-high-security

Compliant with both FIPS and CC-NDPP and excludes low-security ciphers.

compatible

Improved security while maintaining backward compatibility.

Example

The following example specifies the cipher list for FIPS compliance.

hostname (admin) # ssh server cipher-list fips

User role

Admin

Supported appliances

This command is supported on the following appliances running the specified releases or later: