SSHv2 Approved Algorithms in FIPS-140-2 Mode

SSHv1 is not supported in FIPS-140-2 mode and is therefore blocked from configuration; only SSHv2 is supported. The following algorithms, configured using the client-cipher-list or server-cipher-list command, are available for SSHv2 when the node is running in FIPS-140-2 mode:

• aes128-cbc

• 3des-cbc

• aes192-cbc

• aes256-cbc

• aes128-ctr

• aes192-ctr

• aes256-ctr

The following algorithms are not available for SSHv2 when the node is running in FIPS-140-2 mode:

• blowfish-cbc

• cast128-cbc

• arcfour

• rijndael-cbc