ACE30 SSH login issue after image upload

[Nadeem ahmed Ahmed]

Hi,

Currently I am running ACE30 with version A4(2.2),

I am doing upgarde with A5(3.0) But whenever i upload image to ACE i cannot login ACE via SSH but telnet works fine.

I tried to remove ssh keys, generated new keys even then no ssh login.

Then i reload ACE with old image then ssh login start coming. I would appreciate if someone share the same experience and any permanent logical fix.

Regards 

[Kanwaljeet Singh]

Hi,

I searched internally as well and i don't see any issue. Can you get the below information:

show ssh key

show ssh maxsessions

also, do ssh key rsa 1024 force and try again.

Can you also get the pcaps on client who is trying to do SSH as well as the show tech from Admin context? Are you trying to do SSH to Admin context or another context?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[Nadeem ahmed Ahmed]

Hi,

 I have tried all the options but to no vain, i removed ssh key n generated with , 

768, 1024, etc etc..

Already verified ssh maxsessions 16, 

I am trying SSH to admin context. PCAP attached from client nonworking when image uploaded and working after ACE reload,

Client: Source ip: 10.1.29.98,   destination IP : 10.1.29.97 ACE vlan20

Actually, during non-working time, only after three way handshake, FIN ACK initiated from ACE and no encryption request is initiated while during working scenario after three way handshake , client three way handshake is initiated and session establish.

[Nadeem ahmed Ahmed]

attached zip file containing pcap

[Nadeem ahmed Ahmed]

Hi,

As told earlier, once i'll reload ACE , SSH will start working.

But the issue occur once you upload image after that SSH stop working.

you can recreate this issue as many times as you like. 

Regards

[Kanwaljeet Singh]

Hi Nadeem,

If the issue is 100% reproducible, then this could be a bug but i haven't seen anything like reported here. There have been lot of upgrades to A530 in the field. Do you have show tech during the problem along with show logging? I would suggest to open a TAC case with this and collect pcaps as well as show tech along with syslogs during the problem and let them go to development for further analysis if show tech doesn't tell what is going on. That's the proper channel  to address the issue.

There was this recent DDTS:

CSCup61227    ACE 30 A5(3.0) - Warning:- MTS queue is full opcode 4062sap%d pid %d

I need to see if you are getting the similar message. The SSH seems to fail when this message shows up. If you do sh ssh session-info, do you see any stuck connections? Do you run any script which ssh into ACE periodically to collect data?

Regards,

Kanwal

Note: Please mark answers if they are helpful.
 

[Kanwaljeet Singh]

Hi,

I see what you are saying. Thank you for the pcaps. This is definitely ACE misbehaving. Do you have show tech during the problem? Show logging?

I would like to see the logs during the issue. Did you try reloading the ACE at same version?

Regards,

Kanwal

Note: Please mark answers if they are helpful.