cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2915
Views
0
Helpful
2
Replies

%SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Logs on Catalyst 9500

MambaRod16
Level 1
Level 1

Hello, 

 

I just migrate our Edge Switch from Cisco Catalyst 3850 to Cisco Catalyst 9500 (Catalyst L3 Switch Software (CAT9K_IOSXE), Version 16.12.02, RELEASE SOFTWARE).

 

My switch has logs every two minutes a terminated ssh connection from the Ip address of the host we usually use to connect to our network devices. 

 

Aug 9 20:34:11.334: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 10.170.1.134
Aug 9 20:36:13.952: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 10.170.1.134
Aug 9 20:38:11.203: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 10.170.1.134
Aug 9 20:40:11.656: %SSH-4-SSH2_UNEXPECTED_MSG: Unexpected message type has arrived. Terminating the connection from 10.170.1.134

 

This message did not appear on the old Switch. I have tried the following but the problem continues:

 

  • Crypto key zerosize and then regenerate the crypto key
  • Use the commands "ip ssh rsa keypair-name SSH" and "cry key generate rsa modulus 2048 label SSH"
  • Removing the known host on client side

 

Below the switch configuration:

 

aaa new-model

aaa authentication login default local
aaa authentication login EXAMPLE1 group SERVERS-Tacacs local
aaa authentication enable default group SERVERS-Tacacs enable
!
aaa group server tacacs+ SERVERS-Tacacs
server-private 10.170.1.134 key xxxxxxxxxxxx
server-private 10.170.1.133 key xxxxxxxxxxxx
!

ip ssh version 2

!

crypto key generate rsa modulus 1024

!

line vty 0 4

access-class 75 in
access-class 75 in vrfname Mgmt-vrf
exec-timeout 15 0
logging synchronous
login authentication EXAMPLE1
transport input ssh

 

 

 

 

 

 

 

 

2 Replies 2

johnd2310
Level 8
Level 8

Hi,

 

What ssh client are you using? Have you tried changing the client?

 

Thanks

John

**Please rate posts you find helpful**

marce1000
VIP
VIP

 

 - Check for hints in this thread :

   https://community.cisco.com/t5/switching/ssh-4-ssh2-unexpected-msg-unexpected-message-type-has-arrived/td-p/3045717

 M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: