70658 - SSH Server CBC Mode Ciphers Enabled and 71049 - SSH Weak MAC Algorithms Enabled

[vinod.tiwari16]

Hi,

I'm facing SSH Server CBC Mode Ciphers Enabled and SSH Weak MAC Algorithms Enabled with Cisco 2960x and 3750x switshes.switches IOS version is 15.0(2).

Please help to Remediate the same.

Thank You

[Flavio Miranda]

Hi,

Have you tried this:

> enable
# configure terminal
(config)# ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr
(config)# ip ssh server algorithm mac hmac-sha1

Also, make sure you are running ssh version 2

(config)# ip ssh version 2

[vinod.tiwari16]

Hi,

This Command is not getting accepted by Cisco 2960x and 3750x IOS 15.0 (2).

Is there Solution for IOS 15.0 (2).

Thank You

[Flavio Miranda]

But ip ssh version 2 they support. Maybe this is enough. Had you tried?

[vinod.tiwari16]

Yes.. But problem is same..

[Marvin Rhoads]

As advised in the other posts you have made, you need to upgrade to a newer IOS in order to get support for the stronger ciphers.