Got it

It will take a long time to be prompted for the password after input the user name when client login S5720 switch through SSH

577 0 0 0
Issue Description

It will take a long time to be prompted for the password after input the user name when client login S5720 switch through SSH.

 

Device version: S5720 V200R011C00SPC200

transparent.gif Handling Process

Analysis SSH debug information finding that it is pending in the calculation of the key phase, the following has nearly 14 seconds of waiting time.

Apr 14 2016 20:20:06.270.3 S5720-52X-PWR-SI SSH/7/NO_INFO:Begin to compute the dh shared key.

Apr 14 2016 20:20:20.230.1 S5720-52X-PWR-SI SSH/7/RECV_PKT:Received ssh2 msg ecdh reply packet.

The device provides three key exchange algorithms: dh_group_exchange_sha1, dh_group14_sha1, dh_group1_sha1From a security perspective, it is recommended that you use the dh_group_exchange_sha1 algorithm, but it will take a long time. Now network equipment is using this key exchange algorithm.

Apr 14 2016 20:20:06.170.9 S5720-52X-PWR-SI SSH/7/CHOOSE_KEX:Choose Kex algorithm:diffie-hellman-group-exchange-sha1.

transparent.gif Root Cause

The more secure the key exchange algorithm is, the longer the key needs to be calculated, and the different CPU processing power of different device forms may increase the computation time.

transparent.gif Solution

There is a command line in the device for customers to choose algorithm with short key calculation time (the corresponding security will also be reduced).

16c0f15e5c6e4b02acb9ce89e533d70b

  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."

My Followers

Login and enjoy all the member benefits

Login

Huawei Enterprise Support Community
Huawei Enterprise Support Community
Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.