充齐治堡垒机修改SSH版本

Posted 2022-09-12

由于产品版本原因，登录的设备只能使用SSH Version 1进行登录 ，经过与TAC确认，需要后台修改参数，修改过程如下：
[root@shterm22 ~]# ssh shterm21
FIPS integrity verification test failed.
Warning: Permanently added ‘shterm21,10.0.0.21‘ (RSA) to the list of known hosts.
Last login: Wed Nov 28 11:55:24 2018 from 10.1.13.19

Main Menu

1. Date and Time
2. Network Configuration
3. Service Management
4. Administrators
   H. High Availability
   S. System Status
   T. System Tools
   A. Application Server
   Enter selection: root
   Challenge is 2644853635, enter password to continue: 64575114
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]# vim /etc/ssh/ssh_config

   Host *

   ForwardAgent no

   ForwardX11 no

   RhostsRSAAuthentication no

   RSAAuthentication yes

   PasswordAuthentication yes

   HostbasedAuthentication no

   BatchMode no

   CheckHostIP yes

   AddressFamily any

   ConnectTimeout 0

   Tunnel no

   TunnelDevice any:any

   PermitLocalCommand no

   VisualHostKey no

   Host *
   EscapeChar none
   ServerAliveInterval 60
   StrictHostKeyChecking no
   UserKnownHostsFile /dev/null
   GSSAPIAuthentication no
   ForwardX11Trusted yes
   SendEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
   SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
   SendEnv LC_IDENTIFICATION LC_ALL LANGUAGE
   SendEnv XMODIFIERS
   Cipher des
   PreferredAuthentications publickey,password,keyboard-interactive,gssapi-with-mic,hostbased
   Host 10.0.0.253
   Protocol 1
   "/etc/ssh/ssh_config" 30L, 823C written
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]#
   [root@shterm21 ~]# /etc/init.d/sshd restart
   Stopping sshd: [ OK ]
   Starting sshd: [