SSH issue

[FrankFlintstone16044]

Hi

I am working through my CCNA at the moment. Using a Catalyst 3560 switch for testing.

On Chapter (official cert guide Volume 1) on SSH I can set up SSH on VTY 0 15 no problem the SH IP SSH tells me 

SSH enabled v2.0 

But SH SSH gives me this error

ALTUS2021#SHOW SSH
%No SSHv2 server connections running.
%No SSHv1 server connections running.

I need to set up SSH on client site in a few days and would appreciate any support to getting this issue resolved asap

Thanks

[Martin L]

Yes to all 3, login local means use user name and pass from username x pass y line, u must have it for ssh to work.

if this goes into production, you better get cisco packet tracer from net academy to practice. it is free!

Regards, ML
**Please Rate All Helpful Responses **

[FrankFlintstone16044]

So just reset the username and password and I can SSH in on Putty but not from cmd line using SSH even through I have SSH installed on the PC

[Martin L]

from cmd command is SSH -l username target  where username is cisco from username and target is ip

I think you forgot to use -l username

Or issue may be windows firewall ?

config on switch

username cisco privilege 15 password 0 ccna

ip ssh version 2

ip domain-name cisco.com

crypto key generate rsa

line vty 0 4

login local

Regards, ML
**Please Rate All Helpful Responses **

[FrankFlintstone16044]

So just to crystal clear using your example

From windows (i had issues with the encryption sohad to use 

C:\Windows\system32>ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -c 3des-cbc username@192.168.1.237

THIS WORKED!!!! - RESULT

username <cisco privilege 15>  your username is cisco privilege 15

password <0 ccna>  your password is 0 ccna

ip ssh version 2

ip domain-name cisco.com

crypto key generate rsa

line vty 0 4

login local  

THIS WORKED- FANTASTIC THANK YOU

How about helping out with a few other issues I have related toSSLVPN errors?

[Martin L · Accepted solution]

Glad it works!  i think windows 8 itself has lots of issues like encryption,  normally, command is SSH -l username target only. Try now to see if it works without entering all diffie hellman sha stuff.   normally once keys are generated , u do not need it repeating them. if it fails, at lest you got Putty.

you should create new topic for sslvpn issue.

Regards, ML
**Please Rate All Helpful Responses **