cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1588
Views
5
Helpful
2
Replies
Beginner

ssh error message "CBC Ciphers got moved out of default config"

Hello,

 

i have a new 3650 Switch and when i using ssh i got "%SSH: CBC Ciphers got moved out of default config. Please configure ciphers as required(to match peer ciphers)
[Connection to 10.1.33.3 aborted: error status 0]".

 

 

is there anyone face such issue?

Everyone's tags (1)
2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Rising star

Re: ssh error message "CBC Ciphers got moved out of default config"

@ruslan932 hello,

try run it: sw(config): crypto key generate rsa modulus 2048 and test again.

Jaderson Pessoa
*** Rate All Helpful Responses ***
Beginner

Re: ssh error message "CBC Ciphers got moved out of default config"

Hi!

Command(only) crypto key generate rsa modulus 2048 is not enough.

 

Solution: using also this command:

 

Switch(config)#ip ssh client algorithm encryption ?
3des-cbc Three-key 3DES in CBC mode
aes128-cbc AES with 128-bit key in CBC mode
aes128-ctr AES with 128-bit key in CTR mode
aes192-cbc AES with 192-bit key in CBC mode
aes192-ctr AES with 192-bit key in CTR mode
aes256-cbc AES with 256-bit key in CBC mode
aes256-ctr AES with 256-bit key in CTR mode

 

Thanks for your attention!

2 REPLIES 2
Highlighted
Rising star

Re: ssh error message "CBC Ciphers got moved out of default config"

@ruslan932 hello,

try run it: sw(config): crypto key generate rsa modulus 2048 and test again.

Jaderson Pessoa
*** Rate All Helpful Responses ***
Beginner

Re: ssh error message "CBC Ciphers got moved out of default config"

Hi!

Command(only) crypto key generate rsa modulus 2048 is not enough.

 

Solution: using also this command:

 

Switch(config)#ip ssh client algorithm encryption ?
3des-cbc Three-key 3DES in CBC mode
aes128-cbc AES with 128-bit key in CBC mode
aes128-ctr AES with 128-bit key in CTR mode
aes192-cbc AES with 192-bit key in CBC mode
aes192-ctr AES with 192-bit key in CTR mode
aes256-cbc AES with 256-bit key in CBC mode
aes256-ctr AES with 256-bit key in CTR mode

 

Thanks for your attention!

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards