It will take a long time to be prompted for the password after input the user name when client login S5720 switch through SSH

434 0 0 0
Issue Description

It will take a long time to be prompted for the password after input the user name when client login S5720 switch through SSH.

 

Device version: S5720 V200R011C00SPC200

transparent.gif Handling Process

Analysis SSH debug information finding that it is pending in the calculation of the key phase, the following has nearly 14 seconds of waiting time.

Apr 14 2016 20:20:06.270.3 S5720-52X-PWR-SI SSH/7/NO_INFO:Begin to compute the dh shared key.

Apr 14 2016 20:20:20.230.1 S5720-52X-PWR-SI SSH/7/RECV_PKT:Received ssh2 msg ecdh reply packet.

The device provides three key exchange algorithms: dh_group_exchange_sha1, dh_group14_sha1, dh_group1_sha1From a security perspective, it is recommended that you use the dh_group_exchange_sha1 algorithm, but it will take a long time. Now network equipment is using this key exchange algorithm.

Apr 14 2016 20:20:06.170.9 S5720-52X-PWR-SI SSH/7/CHOOSE_KEX:Choose Kex algorithm:diffie-hellman-group-exchange-sha1.

transparent.gif Root Cause

The more secure the key exchange algorithm is, the longer the key needs to be calculated, and the different CPU processing power of different device forms may increase the computation time.

transparent.gif Solution

There is a command line in the device for customers to choose algorithm with short key calculation time (the corresponding security will also be reduced).

16c0f15e5c6e4b02acb9ce89e533d70b

  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login