Forum Discussion

yurnov's avatar
yurnov
Icon for Nimbostratus rankNimbostratus
Jun 14, 2019

Modifying the list of ciphers and MAC algorithms used by the SSH service on the BIG-IP

I wont to configure ciphers and MAC algorithms in my Ansible role, to do that I have used following:   - name: Restore F5 to default settings    shell: |     echo yes | tmsh load /sys config defa...
yurnov's avatar
yurnov
Icon for Nimbostratus rankNimbostratus
Jun 14, 2019

To clarify, in case of:

tmsh modify /sys sshd include none
tmsh modify /sys sshd include 'Ciphers aes128-ctr,aes192-ctr,aes256-ctr'
tmsh modify /sys sshd include 'MACs hmac-sha1,hmac-md5,hmac-sha2-512,hmac-sha2-256'

only latest incude statement appeared in config

and 

tmsh modify /sys sshd include 'Ciphers aes128-ctr,aes192-ctr,aes256-ctr \n MACs hmac-sha1,hmac-md5,hmac-sha2-512,hmac-sha2-256'

failed