ssh settings

Hello,

where do I find the ssh settings in WinBox?

/ip ssh set strong-crypto=yes

In WinBox 3.12 I can not find it.

The option “/ip ssh set strong-crypto=yes” does not change the key-size (no difference between no and yes).
The keysize can be changed with “/ip ssh set host-key-size=…”.

What is the difference between strong crypto and no strong crypto?

Moreover, when forwarding is “no”, it is possible to forward connections with putty for example! Where does this behaviour comes from?

I think strong crypto enforcing ssh connection to use aes 256 algorithm for encryption !

/ip ssh set strong-crypto=yes seems to only apply in v5

I have tested it on a RB2011 with license level 5 and on a RB70 with license level 4.
On both devices the WinBox entry is missing (bug in WinBox because on the item list in the documentation it is listed).
Trough terminal I can set the flags.

Ok, AES-256 instead of AES-128. :slight_smile:

And it is also strange that the port forwarding works although it is disabled.
items.PNG