diff --git a/Fortinet-FortiOS.md b/Fortinet-FortiOS.md index 648a175..11c8bee 100644 --- a/Fortinet-FortiOS.md +++ b/Fortinet-FortiOS.md @@ -2,12 +2,44 @@ FortiOS is an embedded operating system used on various appliances from Fortinet SSH into an appliance running FortiOS, or use a local serial connection in order to apply these options. -## FortiOS >= 7.4.0 +## FortiOS >= 7.6.0 + +Starting with FortiOS 7.6 some commands have moved from ``config system global`` to ``config system ssh-config``. + +``` +config system global + +# These commands shoulnd't change default settings +set admin-ssh-v1 disable +set strong-crypto enable + +# These commands do change default settings +set dh-params 8192 + +end + +config system ssh-config + +# These commands do change default settings +set ssh-enc-algo chacha20-poly1305@openssh.com aes256-gcm@openssh.com +set ssh-hostkey-algo ssh-ed25519 +set ssh-kex-algo diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 curve25519-sha256@libssh.org +set ssh-mac-algo hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com + +end +``` + +**References:** +* The following parameters previously present under ``config-system global`` have moved to ``config system ssh-config``: ``ssh-enc-algo``, ``ssh-hostkey-algo``, ``ssh-kex-algo`` and ``ssh-mac-algo`` + * [Fortinet document library: FortiGate / FortiOS 7.6.0 CLI Reference > config system ssh-config](https://docs.fortinet.com/document/fortigate/7.6.0/cli-reference/207795941/config-system-ssh-config) + * [Fortinet document library: FortiGate / FortiOS 7.6.0 CLI Reference > config system global](https://docs.fortinet.com/document/fortigate/7.6.0/cli-reference/339914554/config-system-global) + +## FortiOS >= 7.4.0 <= 7.6.0 FortiOS 7.4 releases have introduced changes with individual releases, they are summarized into a single section: -* 7.4.2: ``set ssh-hostkey-algo`` modified, it allows configuring more KEX algorithms than in previous releases -* 7.4.1: ``set ssh-kex-algo`` modified, it allows configuring more KEX algorithms than in previous releases +* 7.4.2: ``set ssh-hostkey-algo`` changed, more configurable SSH host key algorithms became available +* 7.4.1: ``set ssh-kex-algo`` changed, more configurable KEX algorithms became available. * 7.4.0: ``set ssh-hostkey-algo`` added, it allows configuring one or more SSH host key algorithms ```