01-17-2023 05:12 AM - edited 01-17-2023 05:16 AM
Hi everyone, I am working with cisco switch WS-C3750X-24,
On my running configuration there is nothing under VTY and console line it like this:
line con 0
line vty 5 15
there is not any information regarding "transport input SSH or telnet."
But i am getting vulnerability regarding SSH weak key exchange algorithms enabled and SSH server CBC mode cypher enabled.
So, my question is that how can I see SSH CBC mode cyphers and key exchange algorithms?
or how can I solve the vulnerabilities which I mentioned above?
"sh ip ssh" command result is showing only version of SSH and that is all.
Thanks, in advance.
01-17-2023 05:55 AM
Hello,
which IOS version and which image/template are you running ?
Do you see anything when you add a domain name and generate an RSA key ?
3750(config)#ip domain-name cisco.com
3750(config)#crypto key generate rsa modulus 2028
01-17-2023 06:20 AM
I am using (C3750-ADVIPSERVICESK9-M) image and 12.2(46) SE IOS version.
Domain name is added but could not find something detailed about crypto key.
01-17-2023 06:20 AM
On this old platform you can't configure these settings. They were introduced in newer IOS releases that the 3750-X is not capable to run.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide