Removing SSH Weak Ciphers SDWAN Router Controller Mode

[billburns]

On the SDWAN routers that are in controller mode, I need to remove HMAC-SHA1 from the list of options for SSH to connect. Is there a template that would be used to modify SSH, like a CLI template. I am looking to push the equivalent commands down to the routers.

ip ssh server algorithm mac hmac-sha2-256
ip ssh server algorithm encryption aes256-ctr
ip ssh server algorithm kex ecdh-sha2-nistp384

[LukaszC]

Week algorithm are also used for netconf-yang. Can those be disabled on SDWAN routers?

no netconf-yang ssh server algorithm mac hmac-sha1
no netconf-yang ssh server algorithm encryption aes128-cbc
no netconf-yang ssh server algorithm encryption aes256-cbc
no netconf-yang ssh server algorithm kex diffie-hellman-group14-sha1