Lenovo RackSwitch G8264 Application Manual page 60

60
G8264 Application Guide for ENOS 8.4
Table 3.
Acceptable Protocols and Algorithms (continued)
Protocol/Function Strict Mode Algorithm
SSH/SFTP
Host Key SSH‐RSA
Key Exchange ECDH‐SHA2‐NISTP521
ECDH‐SHA2‐NISTP384
ECDH‐SHA2‐NISTP256
ECDH‐SHA2‐NISTP224
RSA2048‐SHA256
DIFFIE‐HELLMAN‐GROUP‐EXCH
ANGE‐SHA256
DIFFIE‐HELLMAN‐GROUP‐EXCH
ANGE‐SHA1
Encryption AES128‐CTR
AES128‐CBC
3DES‐CBC
MAC HMAC‐SHA1
HMAC‐SHA1‐96
TACACS+ TACACS+ does not comply with
NIST SP 800‐131A specification.
When in strict mode, TACACS+ is
disabled. However, it can be
enabled, if required.
Compatibility Mode Algorithm
SSH‐RSA
ECDH‐SHA2‐NISTP521
ECDH‐SHA2‐NISTP384
ECDH‐SHA2‐NISTP256
ECDH‐SHA2‐NISTP224
ECDH‐SHA2‐NISTP192
RSA2048‐SHA256
RSA1024‐SHA1
DIFFIE‐HELLMAN‐GROUP‐EX
CHANGE‐SHA256
DIFFIE‐HELLMAN‐GROUP‐EX
CHANGE‐SHA1
DIFFIE‐HELLMAN‐GROUP14‐S
HA1
DIFFIE‐HELLMAN‐GROUP1‐S
HA1
AES128‐CTR
AES128‐CBC
RIJNDAEL128‐CBC
BLOWFISH‐CBC
3DES‐CBC
ARCFOUR256
ARCFOUR128
ARCFOUR
HMAC‐SHA1
HMAC‐SHA1‐96
HMAC‐MD5
HMAC‐MD5‐96
Acceptable