Unable to ssh

[sbrooks011]

Hi,

Can anybody help me with this.

I can remotely get to a customer router, but i'm unable to ssh on to the switch....The message I get is: [Connection to xxx.xxx.x.x aborted: error status 0]

[mvsheik123]

Hi,

Check below posting.

https://supportforums.cisco.com/t5/wan-routing-and-switching/issue-ssh/td-p/1205236

hth

MS

[Moses Fernandes]

Hello,

Check the following things.

1) are you able to ssh into the devices locally (from within the LAN).
2) Check the SSH configuration on switch.
3) ACL (on all the devices involved)
4) check zones/security settings (firewall).
.
.
...... finally Dont forget to confirm that the target device is powered on and connected properly (including VLANs/interface up/up). LOL.
Regards,
Moses.

[jdjmoncivais]

Your issue more than likely is ssh strict host key checking is enabled.

Check your ssh configuration for this command:

ip ssh stricthostkeycheck

If it's in your configuration, you have two options:

1. enable the ip ssh pubkey-chain command: 

ip ssh pubkey-chain

2. Disable strict host key checking

no ip ssh stricthostkeycheck

In your case, I would try option 2.

Good Luck!

[karthi.venkatesan@sifycorp.com]

Hi All,

The reason for the issue is encryption mismatch, check both SSH output in the command SH SSH and check the encryption method which is used, based on that you can change in one end to establish the SSH connectivity.

#show ssh - To check the output

(config)# IP ssh server algorithm encryption aes256-cbc aes128-cbc - To define the standard.

It will work...

Thanks...

[Georg Pauwen]

Hello,

try:

ssh -l username x.x.x.x

If that doesn't work, zeroize and recreate the rsa key:

crypto key zeroize rsa

crypto key generate rsa 1024

and try again (without and with the username)...

[paul driver]

Hello

1) Does that rtr allow you to initiate SSH, Check vty lines config for - transport output XXX  on rtr and the reverse input on the switch

2) check for access lists negating egress or ingress ssh on the rtr and switch again on vty lines
3) check that ssh is enabled on the switch and if it is then as suggested by others it could be worth zero size the crypto key and regenerating a new one.