ip ssh server algorithm mac?

[KGrev]

Hi,

My stig checklist is asking for "ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256",

My switch is unable to do this command. We do have "p ssh server algorithm encryption aes256-ctr aes192-ctr aes128-ctr"

What is the mac entry used for on a switch?

Thank you.

[balaji.bandi]

we need to show log ( show logg and post here)

or follow below guide for SSH

https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html

add some keys based on the outout error :

https://learningnetwork.cisco.com/s/question/0D53i00000Kt5dECAR/both-telnet-and-ssh-not-working-from-mac

[KGrev]

Balaji,

Sorry, I may have mis-worded my question. I currently have no issue with the operation of the switch. Everything is fine.

A checklist wants me to enter that command but my switch is incompatible with it.

I'm curious what that command "ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256" does as I already have "ip ssh server algorithm encryption aes256-ctr aes192-ctr aes128-ctr" in my configuration.

[balaji.bandi]

what device is this, what version IOS code running on it.

post below output :

show version

show ip ssh (if you ssh version 2 then you can use that ciphers) - again IOS  need to support.

[KGrev]

WS-C6506-E

155.5.1 sy3

SSH Version 2

[balaji.bandi · Accepted solution]

Look at the IOS requirement :

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cr-i3.html#wp6958353100

[KGrev]

Balaji,

Thanks, your link alerted me that there are statements in the config invisible until changed by the user.

I didn't know that it was already running sufficient hmac algorithms.

Thanks