SSH weak algorithm (cat4500e-IPBASEK9-M)

[BernardNdale]

Dears,

 I am having vulnerabilities issue with SSH weak algorithm.
Can someone help how to change algorithm used by SSH on Cisco Switch Cat4500

IOS : Version 15.0(2)SG

Rommon : 12.2

[Reza Sharifi]

Hi,

If the encryption is too weak, you can make it stronger with this command:

crypto key generate rsa modulus <360-4096>

Have a look at the config guide:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380-configuration/x509v3.html

HTH

[balaji.bandi]

I am having a vulnerabilities issue with SSH weak algorithm.  - what vulnerability you got now. Do you have SSH with version 2 ?

show post  - show run | in ssh and show ip ssh

[BernardNdale]

Yes I have disabled SSHv1 and enable SSHv2 but vulnerability still persists

[balaji.bandi]

Can you post the example of  "vulnerability still persists"

[BernardNdale]

I tried to increse the length of Key the observe next scan result.

Thanks for support !

[balaji.bandi]

Sure, but check the device overhead also before increasing the higher level.