SSH2_UNEXPECTED

[Manoel Goncalves]

Hi.

Could someone help me understand why logs that are occurring in the Cisco 2911 router?

003865: Jul 18 14:26:25.196 GMT-3: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection
003866: Jul 18 14:26:30.644 GMT-3: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection
003867: Jul 18 14:27:00.065 GMT-3: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection
003868: Jul 18 14:27:23.766 GMT-3: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection
003869: Jul 18 14:27:26.018 GMT-3: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection

Thank,

[johnd2310]

Hi,

What ssh client are you using?

Thanks

John

[Manoel Goncalves]

Hi,

 What is the command I check the ssh cliente?

#show ssh
Connection Version Mode Encryption  Hmac         State                 Username
514        2.0      -       -          -         Version checked       -
1          2.0     IN   aes256-cbc  hmac-sha1    Session started       manoel
1          2.0     OUT  aes256-cbc  hmac-sha1    Session started       manoel
%No SSHv1 server connections running.

[Richard Burts]

Can you post the output of show ip ssh

That will show what versions of ssh you have enabled. My guess is that you have enabled version 2 and not 1. If someone attempted access with version 1 when it is not enabled I believe that it would generate the type of message that you ask about.

HTH

Rick