The option “/ip ssh set strong-crypto=yes” does not change the key-size (no difference between no and yes).
The keysize can be changed with “/ip ssh set host-key-size=…”.
What is the difference between strong crypto and no strong crypto?
Moreover, when forwarding is “no”, it is possible to forward connections with putty for example! Where does this behaviour comes from?
I have tested it on a RB2011 with license level 5 and on a RB70 with license level 4.
On both devices the WinBox entry is missing (bug in WinBox because on the item list in the documentation it is listed).
Trough terminal I can set the flags.
Ok, AES-256 instead of AES-128.
And it is also strange that the port forwarding works although it is disabled.