SSH Version 2

[ITadvice]

I plan on upgrading some Cisco equipment to SSH version 2. Which algorithm is more secure - RSA or 3DES? Which method will require less administration? This will cover a large network so I won't be able to make changes to every device that will be using SSH. How should I determine the length of the key? I know the longer the better, but what is the trade-off?

Thanks in advance.

 

[Grenage]

I'd opt for AES, but it's not like 3DES is insecure. AES supports a 256-bit key length, so unless your clients are entering it manually each time (that would be odd), make it as long as you can.

"We can categorically state that we have not released man-eating badgers into the area" - Major Mike Shearer