Hi there,
since our update of Cisco ASA 5510 (active/standby cluster) from version 8.22 to version 8.24 it isn't possible to transfer files from/to a sftp client.
The request just times out. SSH from this client is possible.
sh ssh
ssh secure copy : ENABLED
Timeout: 15 minutes
Version allowed: 2
...
Clientsite I get in verbose mode the following information:
C:\Dokumente und Einstellungen\h.weinel.BSNETZ>pscp -scp -v user@asa:startup.cfg startup.cfg
Looking up host "asa"
Connecting to asa port 22
Server version: SSH-2.0-Cisco-1.25
We believe remote version has SSH-1 ignore bug
We believe remote version needs a plain SSH-1 password
We believe remote version can't handle SSH-1 RSA authentication
We claim version: SSH-2.0-PuTTY_Release_0.60
Using SSH protocol version 2
Using Diffie-Hellman with standard group "group1"
Doing Diffie-Hellman key exchange with hash SHA-1
Host key fingerprint is:
ssh-rsa 2048 36:58:08:33:93:d7:04:b4:31:64:b0:3c:27:f4:1a:47
Initialised AES-256 CBC client->server encryption
Initialised HMAC-SHA1 client->server MAC algorithm
Initialised AES-256 CBC server->client encryption
Initialised HMAC-SHA1 server->client MAC algorithm
Using username "weinelh".
user@asa's password:
Sent password
Access granted
Opened channel for session
Started a shell/command
Using SCP1
Connected to asa
....
and then nothing happens. After a view attempts the ressource ssh reaches the limit and after that no SSH and scp isn't possible
show resource usage
Resource Current Peak Limit Denied Context
SSH 5 5 5 2 System
ASDM 2 2 5 0 System
Syslogs [rate] 100 1902 N/A 0 System
Conns 7538 8899 130000 0 System
Hosts 1333 1385 N/A 0 System
Conns [rate] 19 1889 N/A 0 System
Inspects [rate] 2 664 N/A 0 System
How can I solve the problem
best regards
Holger Weinel
