SSH issue.

[Athees_M]

Hi all,

I have a question.

From A server, I am unable to access the cisco device via SSH. The TCP session is open for port 22. I am to telnet the device via port number 22 from the server.

When I tried to ssh the device below output I get.

SW1#sh ssh
Connection Version Encryption State Username
1 0.0 - Open -                                                                 ---------> In what case it will get the output like this
Connection Version Mode Encryption Hmac State Username
0 2.0 IN aes128-ctr hmac-sha1 Session started xxxxxxx
0 2.0 OUT aes128-ctr hmac-sha1 Session started xxxxxxx

I have tried regenerating rsa key on the device but it didn't work.

can someone help on this? 

[Rob Ingram]

@Athees_M 

It maybe that the SSH client doesn't support the encryption level you are using. What SSH client and version are you using?

Turn on ssh debugs using "debug ip ssh", connect and then provide the log output for review

[balaji.bandi]

can you post

#sh ip ssh

if it is 1.0 suggest to un v2

ip ssh version 2

are you trying from Linux ? to connect to switch ?

[Athees_M]

I am trying to ssh device from Linux box

[balaji.bandi]

post #sh ip ssh

[Athees_M]

XXXXXXXXXXSW1#sh ip ssh
SSH Enabled - version 2.0
Authentication methods:publickey,keyboard-interactive,password
Authentication Publickey Algorithms:x509v3-ssh-rsa,ssh-rsa
Hostkey Algorithms:x509v3-ssh-rsa,ssh-rsa
Encryption Algorithms:aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc
MAC Algorithms:hmac-sha1,hmac-sha1-96
Authentication timeout: 60 secs; Authentication retries: 3
Minimum expected Diffie Hellman key size : 1024 bits
IOS Keys in SECSH format(ssh-rsa, base64 encoded): XXXXXXXXXXXSW1.XXX.com
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDPnEgdS2lti0qCrWwt3/vgasWCVqwfquWa6TZFwXRa
tzqIVirz9MLg8P1erP2g0VWbHIyBGthuAZCXNDu3SLqKBq7ovEepYgPhALCW3YduG+JwbZaGyPySu9jm
H3vAsmLkM7vIXMU0BjnDHy7Bz1O3KpSNc36SjhLOzs9rUPAnKw==