cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
439
Views
0
Helpful
4
Replies

SSH error

badday
Level 1
Level 1

Dear All,

     My switch stopped working for some time, I got the below error in log, we are using SSH protocol, and we don't have VLAN200 in our LAN network, any idea? Is it attack or normal IP misconfigure by someone? The only way allowed to SSH this switch is from Core switch only.

Dec 4 00:02:35.095: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 192.168.200.40

 

4 Replies 4

marce1000
VIP
VIP

 

 - What is the switch model ?

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

It's 2960 cisco switch

Version 15.2(7)E3

 

 - Similar to this bug  https://bst.cloudapps.cisco.com/bugsearch/bug/CSCsu27706 , probably related to resource exhaustion , you  may need to reboot the device when a windows for that is available.

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Hello,

it (obviously) looks like 192.168.200.40 is trying to SSH into your switch. If that IP address is not in your network, somebody (or some automated program) might be trying to gain access. It could also be a spoofed IP address. Are your users able to configure their own IP addresses, and/or connect random devices to random switchports ? What kind of security do you have configured (e.g. port security, 802.1x authentication) ?