Wired Intelligent Edge (Campus Switching and Routing)

Reply
Highlighted
Occasional Contributor II

Password configured with sha256 option not working

Hello,

I try to harden the security of my Aruba 2930F switch by disabling SHA-1 and enabling SHA-256.

SW01(config)# password non-plaintext-sha256
SW01(config)# password manager user-name admin sha256 [PASSWORD-STR]

When I try to logon from the client machine running Linux with OpenSSH legacy SHA-1 deactivated, I get:

$ ssh admin@10.10.10.10
Unable to negotiate with 10.0.16.1 port 22: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1

I did follow the ArubaOS Hardening Guide here but I may had missed something.


Accepted Solutions
Highlighted
MVP Guru Elite

Re: Password configured with sha256 option not working

Hi valentin,

 

the first command is for store password on the switch..

 

the hardening guide is for Aruba OS Mobility Controller

 

I not sure it is is possible to change the cipher for SSH on ArubaOS switch...



PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info

PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info

PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)

PowerArubaIAP: Powershell Module to use Aruba Instant AP

PowerArubaMC: Powershell Module to use Mobility Controller / Master


ACMP 6.4 / ACMX #107 / ACCP 6.5 / ACSP

View solution in original post


All Replies
Highlighted
MVP Guru Elite

Re: Password configured with sha256 option not working

Hi valentin,

 

the first command is for store password on the switch..

 

the hardening guide is for Aruba OS Mobility Controller

 

I not sure it is is possible to change the cipher for SSH on ArubaOS switch...



PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info

PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info

PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)

PowerArubaIAP: Powershell Module to use Aruba Instant AP

PowerArubaMC: Powershell Module to use Mobility Controller / Master


ACMP 6.4 / ACMX #107 / ACCP 6.5 / ACSP

View solution in original post

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: