``` root@login:~# cat .ssh/config Host switch User sown KexAlgorithms +diffie-hellman-group1-sha1 Ciphers aes256-cbc HostKeyAlgorithms +ssh-rsa ``` these machines are new and shiny so we could actually put this in `/etc/ssh_config.d` I think