topic Disable SSH version 1 on IPS in Network Security

Disable SSH version 1 on IPS

waltermavely — Sun, 10 Mar 2019 11:47:37 GMT

We want disable SSH version 1 from our ips, we have checked document but we couldn't find any solution please say your inputs thanks

Re: Disable SSH version 1 on IPS

smukhanin — Mon, 12 Oct 2009 12:09:12 GMT

This is just simple openssh changes needed.

in service mode change /etc/ssh/sshd_config

Where is

#Protocol 2,1

must be

Protocol 2

Make shure that you in super user mode, than save file and reboot ips

Re: Disable SSH version 1 on IPS

waltermavely — Mon, 12 Oct 2009 12:30:38 GMT

thanks for reply can you guide me step by step commands for this

Re: Disable SSH version 1 on IPS

smukhanin — Mon, 12 Oct 2009 12:43:18 GMT

#configure term

(conf t)#username serviceAdmin priviledge service password XxxXX

#exit

....

password: ...

...

bash$su

password:...

bash# vi /etc/ssh/sshd_config

Than delete '#' and ',1' in

#Protocol 2,1

To make changes you need press 'Shift+I'

result:

Protocol 2

type 'esc' and ':wq'

bash# /etc/init.d/S60ssh restart

may be sshd or other ssh

Re: Disable SSH version 1 on IPS

waltermavely — Sun, 18 Oct 2009 10:17:48 GMT

i try to do this config but it saying that

"/etc/ssh/sshd_config" File is read only

Re: Disable SSH version 1 on IPS

smukhanin — Sun, 18 Oct 2009 15:18:25 GMT

This is because you not in super user mode. Type 'su' first then type your password, then you will see '#'

Re: Disable SSH version 1 on IPS

waltermavely — Sun, 18 Oct 2009 18:49:50 GMT

thanks Sergey

first i have edited protocol 2 even after ssh version 1 was working, after that i have deleted version key file then it stopped, thanks for your help

Disable SSH version 1 on IPS

Bob MacLean — Tue, 11 Jun 2013 17:03:58 GMT

So this works for incoming SSH but not for outgoing. I couldn't find another file in /etc/ssh that applied to outgoing so my thought was I could do "ssh -2" from the command line in the service acct to be able to do the scp to send a copy of the config to our server that has the backups on it.

1.anyone know what subdir the configs are in?

2. any help on getting the IPS to do ONLY v2 going out? (on a copy current-config scp://xxxxxxxxxx

Disable SSH version 1 on IPS

mark.barrett — Tue, 11 Jun 2013 18:20:47 GMT

1. /usr/cids/ids/Root/etc

Re: Disable SSH version 1 on IPS

Bob MacLean — Tue, 11 Jun 2013 19:50:10 GMT

Thanks, that allowed the scp from the service acct.

syntax error, though. Correct sp. is /usr/cids/idsRoot/etc

Still would like to get SSH 2 working though..