ssh client cipher

Function

The ssh client cipher command configures encryption algorithms on an SSH client.

The undo ssh client cipher command restores the default encryption algorithms on an SSH client.

By default, the SSH client supports these encryption algorithms: AES128_CTR, AES256_CTR, AES192_CTR, AES128_GCM, AES256_GCM.

Format

ssh client cipher { des_cbc | 3des_cbc | aes128_cbc | aes256_cbc | aes128_ctr | aes256_ctr | arcfour128 | arcfour256 | aes192_cbc | aes128_gcm | aes256_gcm | aes192_ctr } ^*

undo ssh client cipher

Parameters

Parameter	Description	Value
des_cbc	Specifies a DES encryption algorithm in CBC mode.	-
3des_cbc	Specifies a 3DES encryption algorithm in CBC mode.	-
aes128_cbc	Specifies an AES128 encryption algorithm in CBC mode.	-
aes256_cbc	Specifies an AES256 encryption algorithm in CBC mode.	-
aes128_ctr	Specifies an AES128 encryption algorithm in CTR mode.	-
aes256_ctr	Specifies an AES256 encryption algorithm in CTR mode.	-
arcfour128	Specifies an Arcfour128 encryption algorithm.	-
arcfour256	Specifies an Arcfour256 encryption algorithm.	-
aes192_cbc	Specifies an AES192 encryption algorithm in CBC mode.	-
aes128_gcm	Specifies an AES128 encryption algorithm in GCM mode.	-
aes256_gcm	Specifies an AES256 encryption algorithm in GCM mode.	-
aes192_ctr	Specifies an AES192 encryption algorithm in CTR mode.	-

Views

System view

Default Level

3: Management level

Task Name and Operations

Task Name	Operations
ssh-client	write

Usage Guidelines

Usage Scenario

To configure encryption algorithms on an SSH client, run the ssh client cipher command. The SSH client and server negotiate encryption algorithms for the packets exchanged between them. During negotiation, the client sends its encryption algorithms to the server. After comparing the received encryption algorithms with local ones, the server selects the first matching encryption algorithm received for packet transmission. If no matching encryption algorithm is found, the negotiation fails.

Precautions

To ensure high security, you can use the encryption algorithms such as: aes128_ctr, aes256_ctr, aes192_ctr, aes128_gcm, aes256_gcm.
This command takes effect for both IPv4 and IPv6 SSH clients.

Example

# Configure encryption algorithms in aes256_ctr mode on an SSH client.

<HUAWEI> system-view
[~HUAWEI] ssh client cipher aes256_ctr