/ home / check_point / check_point.gaia / 5.0.1 / module / cp_gaia_ssh_server_settings

check_point.gaia.cp_gaia_ssh_server_settings (5.0.1) — module

Modify ssh server settings.

| "added in version" 3.0.0 of check_point.gaia"

Authors: Ameer Asli (@chkp-ameera)

Install collection

Install with ansible-galaxy collection install check_point.gaia:==5.0.1

Add to requirements.yml

  collections:
    - name: check_point.gaia
      version: 5.0.1

Description

Modify ssh server settings.

Requirements

supported starting from gaia_api >= 1.7

Usage examples

Scanned by Steampunk Spotter

- name: Set ssh server settings
  check_point.gaia.cp_gaia_ssh_server_settings:
    enabled_ciphers: ['aes128-ctr', 'aes128-gcm@openssh.com', 'aes192-ctr', 'aes256-ctr',
                      'aes256-gcm@openssh.com', 'chacha20-poly1305@openssh.com']
    enabled_kex_algorithms: ['curve25519-sha256', 'curve25519-sha256@libssh.org',
                             'diffie-hellman-group14-sha1', 'diffie-hellman-group14-sha256',
                             'diffie-hellman-group16-sha512', 'diffie-hellman-group18-sha512',
                             'diffie-hellman-group-exchange-sha256', 'ecdh-sha2-nistp256',
                             'ecdh-sha2-nistp384', 'ecdh-sha2-nistp521']
    enabled_mac_algorithms: ['hmac-sha1', 'hmac-sha1-etm@openssh.com',
                             'hmac-sha2-256', 'hmac-sha2-256-etm@openssh.com',
                             'hmac-sha2-512', 'hmac-sha2-512-etm@openssh.com',
                             'umac-64-etm@openssh.com', 'umac-64@openssh.com',
                             'umac-128-etm@openssh.com', 'umac-128@openssh.com']

Inputs

    
version:
    description: Gaia API version for example 1.6.
    required: false
    type: str

enabled_ciphers:
    description: Enabled ssh ciphers.
    elements: str
    required: false
    type: list

enabled_kex_algorithms:
    description: Enabled ssh kex algorithms.
    elements: str
    required: false
    type: list

enabled_mac_algorithms:
    description: Enabled ssh mac algorithms.
    elements: str
    required: false
    type: list

Outputs

ssh_server_settings:
  description: The updated ssh server settings details.
  returned: always.
  type: dict