Key exchange algorithms on 6504E

[andromeda]

Could someone here please help me answer this question: have a 6504E running on 15.5(1)SY5 (latest) and need to know if its KEX algorithms can be updated somehow to a more modern set, currently only supporting diffie-hellman-group-exchange-sha1. 

Thanks!

[balaji.bandi]

here is the latest information :

https://community.cisco.com/t5/security-documents/guide-to-better-ssh-security/ta-p/3133344

[andromeda]

Thanks, appreciate it. However that doesn't cover KEX on the cisco switch...

[Marius Gunnerud]

You could try the following command (replace <size> with the value you need or use ? to see what is available):

ip ssh dh min size <size>

[andromeda]

Thank you, but that also doesn't address my concern. The KEX available still show dh with sha-1 only.

[Marius Gunnerud]

Came across this document.  Hopefully it will point you in the right direction.

https://community.cisco.com/t5/security-documents/guide-to-better-ssh-security/ta-p/3133344

[andromeda]

Thanks, that's the same doc shared on the 1st reply. Unfortunately it does not address my question.