Announcement: ICX FastIron 08.0.30t is now available on Support

I forwarded your question to the FastIron development team...

Hello Eric,

You are correct!  diffie-hellman-group14-sha1 isnt supported on 8030t. This is supported on 8070 and higher releases but limited to ICX 7000 series platforms. Adding this capability on 8030 branch is very unlikely will get you a confirmation shortly.

Here is excerpt from 8030t release notes- “Brocade Fast Iron Release 08.0.30f introduces new enhancements”

 •Key exchange method -By default, diffie-hellman-group1-sha1 is the key-exchange method used to establish an SSH connection. You can change the default key-exchange method and configure diffie-hellman-group14-sha1 as the key-exchange method using the ip ssh key-exchange-method dh-group14-sha1 command. The diffie-hellman-group14-sha1 method provides enhanced encryption of shared secrets between two devices. This is supported only on FCX devices

 Could you let us know who is end customer here.

We are an MSP and the end customer.

The issue is that my router is running a version of FreeBSD that dropped support for less secure SSH methods (Ruckus RIOT partner RG Nets rXg). When I try to SSH into my ICX6450-C12P, I get the following error: 

[[email protected] ~]$ ssh [email protected]
Unable to negotiate with 10.10.2.3 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1

I tried configuring the switch (via telnet) with the following:
[email protected](config)#crypto key gen rsa modulus 2048

The command "ip ssh key-exchange-method" is not recognized, as I'm guessing this is not a "FCX device". 

Again, I'm running 80.0.30saT311 on this switch.

The other switches on this network are ICX 7250's running 08.0.80dT211. I am able to use SSH to communicate with them after running the "ip ssh key-exchange-method dh-group14-sha1" command.

This is a problem with my MacBook Pro connecting to  Cisco IOS 12.2 and below. I simply modified `/etc/ssh/ssh_config`. I assume it'll be just as easy for you to do that too.