02-21-2017 06:34 PM - edited 03-19-2019 12:08 PM
Hi
My customer wants to use OpenSSH for backup SFTP server for CUCM but he prepares Windows Server 2012 R2 for backup server.
Cisco recommend to use OpenSSH for Windows but I can't install it to Windows Server 2012 R2.
# I tried to install this, http://sshwindows.sourceforge.net/
That's why, I want to use Win32-OpenSSH, Microsoft Official OpenSSH software.
https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v0.0.9.0
Is it supported for Cisco Official?
Solved! Go to Solution.
02-22-2017 04:38 AM
The DRS Guide lists three software options that are officially supported and tested by Cisco: OpenSSH, Cygwin, Titan. If Win32-OpenSSH is really OpenSSH you can argue that you're using a supported option; however, the Github project clearly states that v0.0.9.0 is "non-production ready" which undermines that argument. Cygwin is traditionally how you ran OpenSSH on Windows. The problem is that if you have a issue with Win32-OpenSSH you'll have to debate it with Cisco TAC. In all likelihood, they will take the position that you're not using the exact same OpenSSH on GNU/Linux that the BU tested. They will likely ask you to reproduce the issue with one of their sanctioned options.
Trying Win32-OpenSSH and seeing your your backups fail isn't so bad since you would know of the failure and can decide whether to debate it with TAC or take a different path. However, I have personally seen a customer be burned by venturing off the sanctioned list of options with no indication of a problem until they needed to do a restore. That customer was using a different commercial Windows SFTP server - not FreeFTPd - and DRS showed the backups were completing successfully; however, the backup file was always corrupted and weren't actually useable. DRS couldn't read the file when we attempted to perform a restore. Ever since that day I warn customers: deviate from the supported options at your own peril. IMO, it's just not worth the risk. If you really want to run on Windows and have a clean GUI, go buy Titan. If you're willing to use a CLI and GNU/Linux-style configuration files, use Cygwin; otherwise, spin up a GNU/Linux server.
02-22-2017 12:31 AM
Wouldn't it be wayyyy easier to use a Linux distribution, such as Ubuntu, where everything is already built in and ready to go?
02-23-2017 05:57 PM
Hi, Philip
My customer already has Windows Server, so I can't propose using a Linux to him.
02-22-2017 04:38 AM
The DRS Guide lists three software options that are officially supported and tested by Cisco: OpenSSH, Cygwin, Titan. If Win32-OpenSSH is really OpenSSH you can argue that you're using a supported option; however, the Github project clearly states that v0.0.9.0 is "non-production ready" which undermines that argument. Cygwin is traditionally how you ran OpenSSH on Windows. The problem is that if you have a issue with Win32-OpenSSH you'll have to debate it with Cisco TAC. In all likelihood, they will take the position that you're not using the exact same OpenSSH on GNU/Linux that the BU tested. They will likely ask you to reproduce the issue with one of their sanctioned options.
Trying Win32-OpenSSH and seeing your your backups fail isn't so bad since you would know of the failure and can decide whether to debate it with TAC or take a different path. However, I have personally seen a customer be burned by venturing off the sanctioned list of options with no indication of a problem until they needed to do a restore. That customer was using a different commercial Windows SFTP server - not FreeFTPd - and DRS showed the backups were completing successfully; however, the backup file was always corrupted and weren't actually useable. DRS couldn't read the file when we attempted to perform a restore. Ever since that day I warn customers: deviate from the supported options at your own peril. IMO, it's just not worth the risk. If you really want to run on Windows and have a clean GUI, go buy Titan. If you're willing to use a CLI and GNU/Linux-style configuration files, use Cygwin; otherwise, spin up a GNU/Linux server.
02-23-2017 05:53 PM
Hi, Jonathan
Thank you so much for your prompt and polite response to my question!
I tried to negotiate not using OpenSSH with my customer and persuaded him to use Cygwin. I could not have made it without your advice!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide