For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yurnov's avatar
yurnov
Icon for Nimbostratus rankNimbostratus
Jun 14, 2019

Modifying the list of ciphers and MAC algorithms used by the SSH service on the BIG-IP

I wont to configure ciphers and MAC algorithms in my Ansible role, to do that I have used following:   - name: Restore F5 to default settings    shell: |     echo yes | tmsh load /sys config defa...
yurnov's avatar
yurnov
Icon for Nimbostratus rankNimbostratus
Jun 14, 2019

To clarify, in case of:

tmsh modify /sys sshd include none
tmsh modify /sys sshd include 'Ciphers aes128-ctr,aes192-ctr,aes256-ctr'
tmsh modify /sys sshd include 'MACs hmac-sha1,hmac-md5,hmac-sha2-512,hmac-sha2-256'

only latest incude statement appeared in config

and 

tmsh modify /sys sshd include 'Ciphers aes128-ctr,aes192-ctr,aes256-ctr \n MACs hmac-sha1,hmac-md5,hmac-sha2-512,hmac-sha2-256'

failed

Related Content