SSHv2 Client

The SSHv2 client allows you to connect from a RUCKUS ICX device to an SSHv2 server, including another RUCKUS ICX device that is configured as an SSHv2 server. You can start an outbound SSHv2 client session while you are connected to the device by any connection method (SSHv2, Telnet, console). RUCKUS ICX devices support one outbound SSHv2 client session at a time.

The following SSHv2 client features are supported:

• Encryption algorithms, in the order of preference:
  • aes256-ctr
  • aes192-ctr
  • aes128-ctr
  • aes256-cbc
  • aes192-cbc
  • aes128-cbc
  • 3des-cbc
• SSHv2 client session authentication algorithms:
  • Password authentication
  • Public key authentication
• Key exchange algorithms: The ICX device supports the following SSHv2 key exchange algorithms: curve25519-sha256, curve25519-sha256@libssh.org, diffie-hellman-group-exchange-sha256, diffie-hellman-group14-sha256, diffie-hellman-group14-sha1, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, ecdh-sha2-nistp256, ecdh-sha2-nistp384, and ecdh-sha2-nistp521.
• The client session can be established through either in-band or out-of-band management ports.
• The client session can be established through IPv4 or IPv6 protocol access.
• The client session can be established to a server listening on a non-default SSH port.