topic Dear Marvin, in Network Security

Cisco ASA 5545

Future Group Network — Fri, 21 Feb 2020 14:13:22 GMT

unable to login to Cisco ASA through SSH.

getting below error.

"ssh_exchange_identification: read: Connection reset by peer"

Has it ever worked?

Marvin Rhoads — Sun, 13 Aug 2017 08:18:24 GMT

Has it ever worked?

If not, do you have an active 3DES-AES license? Have you created an RSA key on the ASA and allowed the source address (or subnet) of the client you are using?

If so, what has changed?f

Dear Marvin,

Future Group Network — Sun, 13 Aug 2017 12:24:01 GMT

Dear Marvin,

Yes it was working earlier .

can we get the steps to re0configure SSH.ASA model is 5545.

Please first share the output

Marvin Rhoads — Mon, 14 Aug 2017 06:46:08 GMT

Please first share the output of the following via console:

sh ver | i AES
show ssh

Dear Marvin,

Future Group Network — Wed, 16 Aug 2017 10:11:09 GMT

Dear Marvin,

Please find the below output and help us.

FG-POC-ASA-1/act/pri# sh version | include AES
Encryption-3DES-AES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
FG-POC-ASA-1/act/pri# sho
FG-POC-ASA-1/act/pri# show ssh
ssh secure copy : ENABLED
Timeout: 5 minutes
Versions allowed: 1 and 2
0.0.0.0 0.0.0.0 INSIDE

Try generating a new key. Run

Marvin Rhoads — Wed, 16 Aug 2017 10:50:44 GMT

Try generating a new key. Run the following from config mode:

crypto key gen rsa mod 2048

It's also a good idea to restrict ssh to v2:

ssh version 2