#Brocade san switch configuration how to#
#Brocade san switch configuration upgrade#

Wait for a while then try to connect the server again. *In some of the cases, your connection will be dropped after the SSH stop attempt. #cp /etc/sshd_config /etc/sshd_config_ciphers_change Step 4: Add new ciphers set to the config file #ssh Step 3: Take a backup of ssh configuration #ssh -vvv will observe which ciphers used while trying to make an encrypted connection.Дebug3: cipher ok: aes128-ctr Дebug3: cipher ok: aes192-ctr Дebug3: cipher ok: aes256-ctr Дebug3: cipher ok: aes128-cbc Дebug3: cipher ok: 3des-cbc Дebug3: cipher ok: blowfish-cbc Дebug3: cipher ok: cast128-cbc Дebug3: cipher ok: aes192-cbc Дebug3: cipher ok: aes256-cbc Дebug3: ciphers ok: Дebug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1Дebug2: kex_parse_kexinit: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbcДebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbcДebug2: kex_parse_kexinit: kex_parse_kexinit: kex_parse_kexinit: kex_parse_kexinit: algorithms will be used show as on this step:Дebug1: kex: server->client aes128-ctr hmac-sha1 noneДebug1: kex: client->server aes128-ctr hmac-sha1 none Step 2: Connect Brocade SAN Switch with 'root' account Step 1: Check Brocade SAN Switch supported ciphers

#Brocade san switch configuration upgrade#

You should follow these steps to disableВ untrusted ciphersВ if it's not possible to upgrade SAN Switch firmware. Originally known for its leadership in Fibre Channel storage networks, the company has expanded its focus to include a wide range of products for New IP and Third platform technologies. So the weak ciphers algorithms, 'arcfour,arcfour128,arcfour256' are notВ trusted algorithms anymore. is an American technology company specializing in data and storage networking products. You may have run a security scanВ and find out your system is effected 'SSH Weak Algorithms Supported'В vulnerability. Step 4: Add new ciphers set to config file.Step 3: Take a backup of ssh configuration.Step 2: Connect Brocade SAN Switch with 'root' account.

syslogadmin -set -ip To check status, use the show command.

#Brocade san switch configuration how to#

Step 1: Check Brocade SAN Switch supported ciphers I will show here how to configure a Brocade FibeChannel switch that it will send logs to a syslog server.