Mikrotik RouterOS “/ip ssh” setting not available from WinBox and defaulting to insecure?
Posted by jpluimers on 2021/09/20
Still need to research this further:
Somewhere around 6.44, when upgrading an existing RouterOS device, this snippet became part of the configuration:
/ip ssh set allow-none-crypto=yes forwarding-enabled=remote
A few remarks:
- I could not find anything in WinBox that is equivalent.
- This sounds very insecure, so I have run this script:
/ip ssh set allow-none-crypto=no forwarding-enabled=nowhich makes the snippet to disappear (because they are default settings according to [WayBack] Manual:IP/SSH – MikroTik Wiki).
Like usual, the on-line documentation is dense and insufficiently clear, hence my measure.
In the future, I need to decipher these posts (via [WayBack] winbox ssh allow none crypto – Google Search and [WayBack] winbox ssh forwarding enabled remote – Google Search):
- [WayBack] v6.44.3 [stable] is released! – MikroTik
- [WayBack] v6.44rc [testing] is released! – MikroTik
- [WayBack] v6.44 [stable] is released! – MikroTik
- [WayBack] Ssh – MikroTik
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a comment