02-27-2018 10:34 PM - edited 02-21-2020 07:27 AM
Having 12.4 version IOS in Cisco 7206 router, how to disable SSH Server CBC Mode Ciphers, SSH Weak MAC Algorithms
02-28-2018 01:57 AM
Hi,
AES-CTR is more secure than CBC, however CTR is only supported on newer 15.x IOS firmware.
Here are the commands to configure for your reference https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_ssh/configuration/15-s/sec-usr-ssh-15-s-book/sec-secure-shell-algorithm-ccc.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community
