SSH to ASA : connection reset by peer

[Olivier Jessel]

Hi,

I've now 2 ASA devices, running v8.0.3 and 8.0.4 and I'm experiencing some troubles with ssh access from outside.

I used the same config for all ASAs I've deployed... others have no problem.

Here is the error I receive when I try to connect from outside to the ASA :

Error while logging in using SSH: SSH process killed: ssh_exchange_identification: read: Connection reset by peer

On ASA : the debug shows :

Teardown TCP connection 161 for outside:CLIENT_IP/43873 to identity:ASA_IP/22 duration 0:00:00 bytes 0 TCP Reset-I

After... I connect to ASA by ssh from inside, and the outside ssh access is working again... for a random time.

Here is the debug when I connect from inside :

Built inbound TCP connection 162 for inside:CLIENT_LOCAL_IP/4461 (CLIENT_LOCAL_IP/4461) to identity:ASA_INTERNAL_IP/22 (ASA_INTERNAL_IP/22)

7|Nov 06 2008 21:51:43|711002: Task ran for 10 msec, Process = ssh_init, PC = 8ac72dc, Traceback =

7|Nov 06 2008 21:51:43|711002: Task ran for 10 msec, Process = ssh_init, PC = 8ac72dc, Traceback = 0x08AC72DC 0x08AD3BCD 0x08AD1B1E 0x08AD1CC8 0x08AD2D51 0x08ACBAE4 0x0805E983

it seems it activates the ssh process again...or something else ^^

Any idea what could happen ??

about config of the ASA, well, ssh is allowed from inside LAN and outside for one pulic IP.

Thanks for any tips ;-)

[sachinjais]

I encountered same issue with my SAS5510. I googled it and found a working solution for it. I had to remove and re-add the whole SSH configuration to get the SSH access back. Still clueless about why it happened. Still looking for an explanation.