topic I'm running 9.6(1) with no in Network Security

SSH Issue after 9.6

Muhammad.Eissa — Fri, 21 Feb 2020 13:48:47 GMT

Hello,

i have issue after upgrade to 9.6 , i am not able to access ssh with the same ip anymore , as show in the attached photo i can do ssh from any interface , and from any ip behind that interface.

that happen only when i upgraded , also after i upgraded all was working normal i notice it today only, i upgraded at the site so maybe that is why i didnt note.

now i am connected by VPN , but the ASA gateway is the same with no issues , same ip to access

its only the DC ASA that have this issue

Note : they both in the same range

Thanks,

Muhammad

I'm running 9.6(1) with no

Philip D'Ath — Thu, 05 May 2016 00:41:00 GMT

I'm running 9.6(1) with no issues. I note compared to your config mine is configured to only allows SSHv2.

ssh stricthostkeycheck
ssh timeout 5
ssh version 2
ssh key-exchange group dh-group14-sha1

Failing that, try

Philip D'Ath — Thu, 05 May 2016 00:46:22 GMT

Failing that, try regenerating the key:

crypto key generate rsa general-keys modulus 4096
crypto key generate ecdsa

Next step to try - use a

Philip D'Ath — Thu, 05 May 2016 00:46:55 GMT

Next step to try - use a different SSH client and see if it has the same issue.

thanks for your fast reply ,

Muhammad.Eissa — Thu, 05 May 2016 01:42:29 GMT

thanks for your fast reply , i will try to clarify the issue more , sorry if didn`t mention that above.

i used to connect on 192.168.3.1 , the outside interface ip of the DC-ASA

also there is 172.16.30.1 and 10.1.127.240 , both are ip of interfaces of it i can ssh to any of them from any as shown in previous photo.

after the upgrade , i am not able to connect by 192.168.3.1 i only connect by 10.1.127.240 from any behind this interface

and 172.16.30.1 from any behind this interface

in this case i understand that the issue he cant see coming from his outside interface , but i do