topic enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960 in Network Security

enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

PaoloArnedo — Tue, 22 Mar 2022 17:51:40 GMT

how do I enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960 switch - asking for some advices and preferable commands to enable it. thanks in advance!

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

balaji.bandi — Tue, 22 Mar 2022 18:15:56 GMT

check below command :

show ip ssh (show you what verion of ssh running)

this should be ssh version 2 as below example :

below commands to make 2048

config t

ip ssh dh min size 2048

end

check again -show ip ssh

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

PaoloArnedo — Tue, 22 Mar 2022 18:23:45 GMT

thank you for the information, for some reason I cannot go into "config t". do you know what could cause this?

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

balaji.bandi — Tue, 22 Mar 2022 18:24:36 GMT

>enable

#config t

or post the screenshot for reference

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

PaoloArnedo — Tue, 22 Mar 2022 18:27:51 GMT

Hello I am using C2960L Software (C2960L-UNIVERSALK9-M), Version 15.2(7)E2 - i think this has no conf t command, please correct me if im wrong

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

balaji.bandi — Tue, 22 Mar 2022 18:30:38 GMT

unfortunatly we can not read someone what they seeing over there.. that is the reason we asked for screenshot here to help.

Cat 2960 Switch has that commands. (what you able to type ?) what prompt are you > or #

Do you have enough rights as admin to go in to config t mode ?

press ? and post the output here to tell you

show priv (tell you what rights you have)

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

PaoloArnedo — Tue, 22 Mar 2022 18:39:31 GMT

what prompt are you > or # - i am prompted on # which means it is already enabled

#show priv
Current privilege level is 15

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

balaji.bandi — Tue, 22 Mar 2022 18:41:59 GMT

you have priv 15, and you enable mode - when you type :

#config t ( what error you get ?)

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

Rob Ingram — Tue, 22 Mar 2022 18:41:04 GMT

@PaoloArnedo provide a screenshot of the error you receive when you cannot access "conf t" - perhaps you have TACACS enabled and you don't have rights to that command, regardless seeing the error would help.

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

PaoloArnedo — Tue, 22 Mar 2022 18:42:57 GMT

I sent a screenshot for the error

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

balaji.bandi — Tue, 22 Mar 2022 18:51:35 GMT

This looks for me you do not have enough rights to get in to config mode

Reasons :

1. you have priv 15, but restricted commands

2. or centralise radius have restricting the access.

show run (are you able to view config ?) if so post that output here ?

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

PaoloArnedo — Tue, 22 Mar 2022 18:54:28 GMT

this is the message I am receiving Sir

Re: enable Diffie-Hellman Key Exchange or a 2048 bit key on C2960

balaji.bandi — Tue, 22 Mar 2022 19:05:41 GMT

his looks for me you do not have enough rights to get in to config mode
Reasons :
1. you have priv 15, but restricted commands
2. or centralise radius have restricting the access.
show run (are you able to view config ?) if so post that output here ?

post below inflormation

show version

show run

(are you able to view config ?) if so post that output here ?