topic When I run SH IP SSH I get in Network Security

OutOfOrder packet processing with ZBF - - SSH being dropped

Paul M1 — Tue, 12 Mar 2019 06:34:23 GMT

Hi all,

I have an unusual issue with ZBF.

My SSH connection from the WAN into the router (self zone) works fine from a terminal but doesn't work from my other routers.

When connecting from my home or work terminal (over the wan), everything connects normally. When I attempt the connection from a router using SSH -l LOGIN *ip address*, I see "Dropping tcp session on zone-pair OUTSELF class SSHCLASS due to Out-Of-Order segment ..."

Now Ive watched the counters of incoming packets so I can see that the connection comes in ok.

Why is this connection attempt from a router treated differently and why isn't out of order processing handling the connection?

All help appreciated.

Paul

Hi,Maybe the SSH version set

Vibhor Amrodia — Wed, 09 Sep 2015 19:47:47 GMT

Hi,

Maybe the SSH version set on the Client Router ? SSH Version 1 probably ?

Thanks and Regards,

Vibhor Amrodia

When I run SH IP SSH I get

Paul M1 — Thu, 10 Sep 2015 13:13:08 GMT

When I run SH IP SSH I get version 1.99 on both routers.

And Ive tried using SSH -V 1 -L LOGIN ip address AND SSH -V 2 -L LOGIN ip address

EDIT - Ive converted the router back to IOS firewall and it still doesn't work. So it must be something that is wrong.

Thanks for your help.