ssh error

[sbrooks011]

The error below is what I get when I try and ssh from a router connected to a switch

[Connection to xxx.xxx.x.x aborted: error status 0]

[Philip D'Ath]

You mention using SSH from a router.  What are you trying to SSH into?

What model router and what software version is it running?

[sbrooks011]

I'm trying to ssh from a 867VAE (router) to a SF302-08P (switch) Details of router below

#sh ver
Cisco IOS Software, C860 Software (C860VAE-IPBASEK9-M), Version 15.2(4)M5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Fri 13-Sep-13 21:09 by prod_rel_team

ROM: System Bootstrap, Version 15.1(4r)M2, RELEASE SOFTWARE (fc1)

RT- xxxxxxxxxx uptime is 1 week, 6 days, 17 hours, 24 minutes
System returned to ROM by reload at 16:52:56 UTC Tue Mar 1 2016
System image file is "flash:c860vae-ipbasek9-mz.152-4.M5.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 867VAE (BCM6368) processor (revision 0.3) with 234496K/26624K bytes of memory.
Processor board ID GMK1748046M
1 DSL controller
1 Ethernet interface
4 FastEthernet interfaces
1 Gigabit Ethernet interface
1 ATM interface
255K bytes of non-volatile configuration memory.
65536K bytes system flash allocated

Configuration register is 0x2102

[Mark Malone]

have you setup the sg switch to allow in ssh connections from that router ip address ?

if you access cli mode in the sg switch you should be able to debug ssh packets and see if they are even hitting the switch

No outgoing acls on the 800 series that prevent ssh port 22 blocked ?

[sbrooks011]

The switch is setup correctly, and I ping the switch from the router whilst remotely connected to the router. We use the same config on all the customer routers and switches and don't have a problem, except this one. I have been into store and reconfigured both router and switch, but still get the same [Connection to xxx.xxx.x.x aborted: error status 0]

[pwwiddicombe]

crypto key set up, domain and device name set up?

[sbrooks011]

I have configured all my customer sites the same way, obviously with different external IP and hostname 

[Philip D'Ath]

Is this SF302-08P running the same firmware as other working ones?

Failing that I would be tempted to re-generate the RSA key on the SF302-08P.

[sbrooks011]

Yes. The same firmware as the working ones. How do you regenerate the RSA key on the switch?

[jdjmoncivais]

Your issue more than likely is ssh strict host key checking is enabled.

Check your ssh configuration for this command:

ip ssh stricthostkeycheck

If it's in your configuration, you have two options:

1. enable the ip ssh pubkey-chain command: 

ip ssh pubkey-chain

2. Disable strict host key checking

no ip ssh stricthostkeycheck

In your case, I would try option 2.

Good Luck!