Users Guide

Version Description
pre-6.1.1.0 Introduced on the E-Series.
Usage
Information
The server-generated key is used for SSHv1 key-exchange.
ip ssh mac
Configure the list of MAC algorithms supported on both SSH client and SCP.
Syntax
ip ssh mac mac-list
Parameters
mac mac-list
Enter the keyword mac then a space-delimited list of message authentication code
(MAC) algorithms supported by the SSH client. The following MAC algorithms are
available.
When FIPS mode is enabled:
● hmac-sha2–256
● hmac-sha1
● hmac-sha1–96
When FIPS mode is disabled:
● hmac-sha2-256
● hmac-sha1
● hmac-sha1–96
● hmac-md5
● hmac-md5-96
Defaults
The default list of MAC algorithm is in the order as shown below:
When FIPS mode is enabled:
● hmac-sha2–256
● hmac-sha1
● hmac-sha1–96
When FIPS mode is disabled:
● hmac-sha2-256
● hmac-sha1
● hmac-sha1–96
● hmac-md5
● hmac-md5-96
Command Modes CONFIGURATION
Command
History
This guide is platform-specific. For command information about other platforms, see the relevant Dell
EMC Networking OS Command Line Reference Guide.
Version Description
9.10(0.1) Introduced on the S6010-ON and S4048T-ON.
9.10(0.0) Introduced on the S3148.
9.10(0.0) Introduced on the S6100–ON, S6000, S6000–ON, S5000, S4810, S4820T, S3048–
ON, S4048–ON, MXL, C9010, S3100 series, and Z9100-ON.
Usage
Information
● You can select one or more MAC algorithms from the list.
● Client-supported MAC list gets preference over the server-supported MAC list in selecting the MAC
algorithm for the SSH session.
● When the MAC (-m) option is used with the SSH CLI, it overrides the configured or default MAC list.
1472 Security