05-04-2016 04:42 PM - edited 02-21-2020 05:48 AM
Hello,
i have issue after upgrade to 9.6 , i am not able to access ssh with the same ip anymore , as show in the attached photo i can do ssh from any interface , and from any ip behind that interface.
that happen only when i upgraded , also after i upgraded all was working normal i notice it today only, i upgraded at the site so maybe that is why i didnt note.
now i am connected by VPN , but the ASA gateway is the same with no issues , same ip to access
its only the DC ASA that have this issue
Note : they both in the same range
Thanks,
Muhammad
05-04-2016 05:41 PM
I'm running 9.6(1) with no issues. I note compared to your config mine is configured to only allows SSHv2.
ssh stricthostkeycheck
ssh timeout 5
ssh version 2
ssh key-exchange group dh-group14-sha1
05-04-2016 05:46 PM
Failing that, try regenerating the key:
crypto key generate rsa general-keys modulus 4096
crypto key generate ecdsa
05-04-2016 05:46 PM
Next step to try - use a different SSH client and see if it has the same issue.
05-04-2016 06:42 PM
thanks for your fast reply , i will try to clarify the issue more , sorry if didn`t mention that above.
i used to connect on 192.168.3.1 , the outside interface ip of the DC-ASA
also there is 172.16.30.1 and 10.1.127.240 , both are ip of interfaces of it i can ssh to any of them from any as shown in previous photo.
after the upgrade , i am not able to connect by 192.168.3.1 i only connect by 10.1.127.240 from any behind this interface
and 172.16.30.1 from any behind this interface
in this case i understand that the issue he cant see coming from his outside interface , but i do
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide