Cisco 3850 SHA-2 support

[xayxa30]

Does anyone know what version of Cisco 3850 will support sha2 ?

I am getting %SSH-3-NO_Match: No matching kex algorithm found since our FIPS client stations negotiate at a higher cipher level. Our Cisco 3850 ver. 16.3.7 and 16.6.4 does not have options to support kex DF groups for SHA2.

Will v. 16.9 work ?

https://www.cisco.com/c/en/us/solutions/industries/government/global-government-certifications/fips-140.html

Thanks,

Pete

[Georg Pauwen · Accepted solution]

Hello,

according to what I could find, SHA-2 is not supported in any release for the 3850. It appears to be supported on the Cat9500 only, starting with 16.8.

[henrydpoughctr]

George, 

Thank you for this solution. Some time has passed since this post, but do you recall where this information can be found. I need supporting documentation that SHA-2 is not supported on the 3850.