1. cisco Nexus5548 version 7.3(5)N1(1)
S1(config)# ssh ?
key Generate SSH Key
login-attempts Set maximum login attempts
S1(config)# ssh
there is no command to disable or change dh groups like IOS
2.Cisco IOS Software, C3900e Software (C3900e-UNIVERSALK9-M), Version 15.5(3)M7, RELEASE SOFTWARE (fc1)
R1(config)#ip ssh dh min size ?
1024 Diffie Group 1 1024-bit key
2048 Diffie Group 14 2048-bit key
4096 Diffie Group 16 4096-bit key
even we configured dh min size 4096, we still can use
ssh -o "KexAlgorithms diffie-hellman-group-exchange-sha1"
to connect the device.
anybody can tell me why? Thanks
