diff --git a/Dang-networks-are-sure-things.md b/Dang-networks-are-sure-things.md index f9c3399..667dffe 100644 --- a/Dang-networks-are-sure-things.md +++ b/Dang-networks-are-sure-things.md @@ -36,4 +36,21 @@ The WiFi here has been pretty terrible for a while. Upgrading our internet speed - [ ] Add new runs for the APs - If we stick with ASUS, I need to either also run power or find convenient places to install them - Ruckus APs will be easier, as they are PoE powered -- [ ] Upgrade bedroom switch connections to 2.5Gb \ No newline at end of file +- [ ] Upgrade bedroom switch connections to 2.5Gb + +# Device-specific notes + +## Ruckus R700 + +These are old devices with trash webpage interfaces that use older security than TLS 1.2 (which basically means no web browsers can get to them.) In order to get around this issue, you need to first setup some old security standards for SSH, and then remote into them and disable HTTPS access and enable HTTP access. + +First, modify `~/.ssh/config` with the following + +```# ~/.ssh/config +Host '' + Ciphers +aes128-cbc + HostKeyAlgorithms +ssh-rsa + PubkeyAcceptedAlgorithms +ssh-rsa +``` + +This enables the older SSH-RSA protocol for this single client, so that you don't need to downgrade all SSH connections. \ No newline at end of file