topic ICX High Encryption in ICX Switches

ICX High Encryption

joseph_coleman — Thu, 09 Dec 2021 22:35:56 GMT

Do the ICX 7450/7750 series switches support high encryption (i.e. SHA256) for SSH and NTP connections?

Re: ICX High Encryption

BenBeck — Thu, 09 Dec 2021 22:52:35 GMT

Hey Joseph,

In terms of non-FIPS (normal) mode, SHA256 was added for SSH in 9000a via:

ICX(config)#ip ssh key-exchange-method dh-group14-sha256

I do not believe it is available for NTP in any release.

If you are running FIPS mode, SHA256 will be used by default for SSH. With that said, FIPS is going to lock down the box quite a bit, so I would make sure you 100% want to go down that route before enabling that mode:

https://support.ruckuswireless.com/documents/3026-fastiron-08-0-90-ga-fips-common-criteria-guide

I should note we are still recommending 8090 code stream at this time, but if you are specifically looking for SHA256 for SSH while in non-FIPS mode, you would need to run 9.x .

Re: ICX High Encryption

joseph_coleman — Fri, 10 Dec 2021 06:06:37 GMT

@ben_beck

Thank You.

It looks like v9000a does not currently support ICX7750. Are there plans to continue updating that model further?

Re: ICX High Encryption

BenBeck — Fri, 10 Dec 2021 06:51:26 GMT

Sorry about that! 8095 will be the last supported code stream for the ICX7750. It will be maintained for the foreseeable future.

Re: ICX High Encryption

Dejeh1 — Mon, 17 Jun 2024 15:33:53 GMT

Hello Ben, you provided the command for 9000a but will you be so kind as to provide the command for 8095