cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2691
Views
0
Helpful
2
Replies

SSH 2 Sessions terminating

pedromclima
Level 1
Level 1

Hi Guys,

I've got a problem with an ASR1004 running "asr1000rp2-adventerprisek9.03.02.00.S.151-1.S.bin".

When I'm performing extended ping tests using a tclsh script i'm geting this error message:

ASR_X1A2#ping 172.27.1.250

% Authorization failed.

When i'm pinging 12 diffrent destinations this happens to about 3 of them.

Checking the logs I found this:

Apr 24 19:42:56.071: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection

In my entire backbone this is happening only in this equipment, I've checked the connection between my ASR and the TACACS and it's OK, no packet loss. CPU and MEM are OK too.

Help?

THanks

2 Replies 2

gurumentality
Level 1
Level 1

I am having a very similiar issue but I am using a 2821 router.

Bilal Nawaz
VIP Alumni
VIP Alumni

Hello, I briefly searched this on Cisco message decoder, and the cisco ouput interpreter and this is what the response was:

ERROR MESSAGE NOTIFICATIONS (if any)

 %SSH-4-SSH2_UNEXPECTED_MSG (x1): Unexpected message type has arrived. Terminating
the connection

Explanation: SSH Session closure warning on receiving an inappropriate message
from the peer

Recommended Action: If this message recurs, copy the error message exactly as
it appears on the console or in the system log. Research and attempt to resolve
the error using the Output Interpreter   https://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.pl
. Issue the  show tech-support  command to gather data that may help identify the
nature of the error. Also perform a search of the Bug Toolkit   http://www.cisco.com/cgi-bin/Support/Bugtool/home.pl.
 If you still require assistance, open a case with the Technical Assistance Center
via the Internet  http://tools.cisco.com/ServiceRequestTool/create/launch.do ,
or contact your Cisco technical support


Not much help, the % Authorization failed normally appears when the tacacs user hasn't got permissions/correct shell profile?

You could always open a TAC case if you haven't already?

Please rate useful posts and remember to mark any solved questions as answered. Thank you.

Please rate useful posts & remember to mark any solved questions as answered. Thank you.
Review Cisco Networking for a $25 gift card