changing IOS-XR SSH server ciphers

[niko]

Hi,

IOS-XR. Given there is SSHv2 enabled and everything, is there are way to disable 3DES ciphers? There are options for that on IOS/IOS-XE, but what about IOS-XR then - can we specify enabled ciphers for SSH servers? Configuration guide seems to be silent about that specifically.

[Dinesh Pullat · Accepted solution]

Not yet. Enabling specific ciphers is targeted for 6.2.x in IOS-XR. However, 6.1.2 onwards we have disabled all cbc-based ciphers via CSCvb53125.

[Peter Zsiros]

Hi Gents,

More than a year passed, this bug is still not public, and I cannot see it fixed in any IOS XR release notes.

Is this fixed now?

Thanks in advance,

Peter