SSHv1 & SSHv2 in WLC

[sreejith_r]

Hello Team;

          Is there any way that we can disable SSHv1 in Cisco Wireless LAN Controller and only allow SSHv2.

[Scott Fella]

From what I know, you can't. The WLC will allow either version.

Sent from Cisco Technical Support iPhone App

[Ravi Singh]

You cannot disable the SSHv1 on WLC because when you enable SSHv2 it also supports SSHv1 due to backward compatibility.

[Abhishek Abhishek]

No, it is not possible to disable SSHv1 in Cisco Wireless LAN Controller and only allow SSHv2. Please mark the post as answered if your query has been resolved.

[dazza_johnson]

Actually, I just tested this on v7.4 (5508 WLC and Virtual WLC) and they ONLY support SSH v2 (they do NOT support SSH v1). This was confirmed with a sniffer.

I found this during my own studies to see if the Cisco WLCs were vulnerable to SSH downgrade attacks (to capture username/password).

Thanks

DJ