From 52c62c7b3d0313fada7c030888d10810be300c07 Mon Sep 17 00:00:00 2001 From: Mathieu Simon Date: Tue, 12 Sep 2023 07:57:19 +0200 Subject: [PATCH] Created Mikrotik RouterOS (markdown) --- Mikrotik-RouterOS.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 Mikrotik-RouterOS.md diff --git a/Mikrotik-RouterOS.md b/Mikrotik-RouterOS.md new file mode 100644 index 0000000..bfb719f --- /dev/null +++ b/Mikrotik-RouterOS.md @@ -0,0 +1,20 @@ +RouterOS is an embedded operating system used on various appliances from Mikrotik. Depending on the version of RouterOS, not all commands may be available, and if major differences are known, they are combined in a version-specific section. + +SSH into an appliance or virtual machine running RouterOS, or in case of a physical device use a local serial connection in order to apply these options. + +## RouterOS >= 7.7 + +RouterOS 7.7 was the first release supporting ``ed25519`` host keys. + +``` +/ip ssh set host-key-size=4096 host-key-type=ed25519 strong-crypto=yes +/ip/ssh/regenerate-host-key +``` + +## Limitations + +In most versions of RouterOS the options available don't permit reaching a perfect score, here are some of the reasons: + +* Host-key algorithms: Not (yet) adjustable. +* Key exchange algorithms: Offers only limited adjustability (``strong-crypto=yes``) +* Message authentication codes: Not (yet) adjustable. \ No newline at end of file