editor
466
edits
VMG1312-B10A: CLI: Difference between revisions
Detail that one might need to force the key-exchange algorithm (e.g. hosts running Debian testing)
('iptables' is an unlisted command. 'ip6tables' is harder to get to.) |
(Detail that one might need to force the key-exchange algorithm (e.g. hosts running Debian testing)) |
||
|
lan config --ipaddr primary 192.168.100.1 255.255.255.0
Note: Check your DHCP settings when changing the LAN address, the DHCP range may well change itself when you change the LAN address this way anyway.
=SSH access=
The ssh daemon on the ZyXEL is provided by 'dropbear', and (at least on AAISP's standard firmware) is an antique version dating from July 2005 and which only offers one key-exchange algorithm (diffie-hellman-group1-sha1), an algorithm which is no longer considered secure and might not be used automatically by clients.
The workaround is to manually specify their only available algorithm. E.g. for an openssh client:
ssh -o KexAlgorithms=diffie-hellman-group1-sha1 admin@192.168.1.1
[[Category:ZyXEL_VMG1312]]
| |||