Deleting MD5 or 96-bit MAC algorthms

[John N]

I have been instructed to delete any weak MD5 or 96-bit MAC algorithms on all my switches.  My current setup I have the following:

hmac-sha2-256

hmac-sha2-512 

hmac-sha1

hmac-sha1-96 

Out of these which would be considered to be weak MAC algorithm? 

[Georg Pauwen · Accepted solution]

Hello,

the SHA1 algorithms are definitely considered weak...

[John N · Accepted solution]

So very interesting thing.... If anyone has this vulnerability, I hope this helps...If you delete hmac-sha1-96 the vulnerability goes away.  The hmac-sha1 can stay.   Thanks for the help.