Questions tagged [ssh]

Secure Shell or SSH is a network protocol that allows secure communication. For most it is a preferred alternative to Telnet when available. SSH can use automatically or manually generated keys for authentication.

Filter by
Sorted by
Tagged with
0
votes
2answers
212 views

Can't log in after admin password change

I reset my admin password with below command: #Set system login user admin authentication encrypted-password <new password> But now i can't login to my device, what can be the reason?
0
votes
0answers
40 views

SSH Key Generation

I have an issue where I can't SSH into to switch due to a connection refused fatal error after a switch rebooted. One of the rsa key that is in the switch that I think is used in the switch is : Key ...
2
votes
3answers
7k views

is a vty password requierd if i have login local set with a username and a password

i am trying to configure the switch to have both telnet and ssh. from what i understand the "login local" command will tell the switch to ask for the user name and password i've configured using ...
0
votes
1answer
51 views

What can I use to display VPN instance instead of stelnet?

How can ı connect VPN service with use ssh in Huawei Atn980c ? Which command? I researched but i didnt different command. I found only this command; stelnet x.x.x.x (VPN instance) (service name) (port ...
0
votes
1answer
71 views

Korenix Switch JetNet 4508v2 SSH Problem

Does anybody know, or has anybody worked with Korenix JetNet 4508v2? This Switch has a very important Bug in the Firmware. SSH is working fine, but for a period of time. Then, ssh is not working ...
0
votes
1answer
34 views

Computers in an unmanaged switch cannot communicate with one another [closed]

TL;DR: I have > 2 computers in an un-managed switch which can't communicate with one another i.e. can't ping or ssh among one another. Long story: As per the diagram my router can reach the ...
0
votes
1answer
316 views

ssh: Could not resolve hostname (updating hostname for machine on local LAN) [closed]

I have connected a raspberry pi 4 running ubuntu 20.04 to my local LAN over wifi. From my laptop I can SSH to the raspberry just fine with: $ ssh ubuntu@192.168.0.47 Welcome to Ubuntu 20.04.1 LTS (GNU/...
0
votes
1answer
34 views

Easiest setup to replace jumpbox forwarding [closed]

In order to connect to some of machines, what I currently do is: Connect to VPN (using AnyConnect) SSH to my jumpbox via VPN For every single machine that I want to access using ssh, I have to map ...
5
votes
2answers
8k views

Why do I get a timeout when I connect via ssh to a Cisco ASA, even though management and ACLs are configured?

I set up a Cisco ASA 5505 8.4(3), and specified ssh version 2 enabled ssh access to the WAN interface via ssh <my network> <mask> <WAN interface> allowed ssh from my network via an ...
1
vote
1answer
74 views

ssh from cisco with fake source-ip

I have two cisco devices directly connected. router1 = 10.70.223.96/31 router2 = 10.70.223.97/31 on router2 there is an admin ACL permit 10.64.95.0 0.0.0.255 so I can't only SSH router2 from that ...
3
votes
4answers
10k views

Switches 'HPE OfficeConnect 1920S' - Enable SSH / TFTP Services

We need to manage switches HPE OfficeConnect 1920S remotely but only HTTP/HTTPS Administration is available. HPE 1920S has an special operating system, neither Procurve nor Comware. We are looking ...
2
votes
2answers
4k views

How to fiter non SSH traffic in Wireshark

I am trying to monitor behaviour of packets from my PC -> VirtualBox machine which represents a virtual router, and I have established SSH session to it. My question is, how to filter out all SSH ...
0
votes
2answers
170 views

Juniper EX Switch sending TCP reset on SSH connection randomly

So as stated in Title I'm observing that one of our switch randomly send RESET flag in TCP and ends the ssh connection in the middle and sends and Window size of 0 as well. Randomly it refuses to ...
2
votes
3answers
11k views

How to assign a static IP to a Cisco Layer 3 switch in order to connect using SSH?

The steps of this manual have been executed in order to configure SSH. Once SSH has been configured, how to access the switch from a computer using SSH? The following steps have been executed in ...
1
vote
1answer
702 views

Lubuntu 18.04 can't SSH to Cisco Router: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [closed]

I'm not sure if this problem caused by Lubuntu or Cisco Router side. Lubuntu = 192.168.1.100 Cisco Router = 192.168.1.1 Ubuntu 18.04.4 LTS user@linux:~$ lsb_release -a No LSB modules are available. ...
0
votes
2answers
58 views

Opening port 22, is there risks? [closed]

I have a question for you, my situation is this: I have an ip cam that have an HTTP Panel through which I can watch live recording of the camera. I need to watch my io camera also from remote, but i ...
3
votes
3answers
2k views

Cisco ASA 5585 SSH LDAP Authentication

I am attempting to setup Microsoft LDAP authentication, for SSH only, for a specific security group on a Cisco ASA 5585 version 8.2(5) using the ASDM. The lookup and authentication is working, however ...
1
vote
2answers
742 views

I can not connect to switch via SSH after bruteforce

One of the operators has bruteforced HP ProCurve switch via SSH. I have connected to device via console cable and killed all SSH sessions. However, I can not still to connect to device via SSH. How ...
0
votes
2answers
471 views

Deny ssh access from CPEs in all routing-instance - Juniper MX960

I try to deny ssh access from routing-instance CPEs in Juniper MX960 device. I want to know if there is a way to deny only ssh access attempt from any routing-instance.
1
vote
2answers
37 views

Is there any method for insert ssh key in putty when i need to connect cisco router?

I need to connect to cisco router and use private key to connect, but i need to use to putty for ssh. Is there any way?
1
vote
2answers
6k views

SSH failing from Cisco routers to Dell switches

Running into two separate but probably similar issues. First issue - I have two Cisco 2900 Series routers on firmware v15.2(4)M4 trying to ssh into a Dell 5548P stack on firmware v4.1.0.8. All ...
0
votes
1answer
49 views

Problem Forwarding Port 22 for SSH [closed]

I'm trying to forward port 22 so I can SSH into my PC from a different network but it doesn't seem to be working. I can do ssh mihkel@my_public_ip from the network that the PC is on but it doesn't ...
4
votes
3answers
3k views

How to install SSL key and certificate on SG 300-10 (and SSH functionality)

How to install our own SSL key and certificate on a SG-300-10 switch? The manual simply doesn't seem to bear much resemblance to what's available in the web interface. According to the manual, one ...
0
votes
0answers
263 views

Prioritizing SSH, Telnet, TACACS in Cisco IOS

For Prioritizing SSH, Telnet, TACACS locally generated traffic on Cisco ASR running IOS XR, we have: ssh server dscp 48 tacacs-server ipv4 dscp 48 Need the same for cisco GSR: 12416/PRP running IOS. ...
0
votes
1answer
377 views

What is the point of Junos outbound SSH service?

Junos outbound SSH service makes a SSH connection from network device to SSH server. What is the point of this? Does it allow the server to somehow make the SSH connection back to network device using ...
2
votes
2answers
1k views

Cisco 3750G - SSH Diffie Hellman Group 1 SHA1 Error

I recently implemented SSH configuration on my 3750G switch stack. I have -set the domain name -generated the rsa key using 2048 bits -ensured that the vty lines are set to transport input ssh Now ...
0
votes
1answer
513 views

Login local , login synchronous

I dont understand what those two comands mean when im enabling ssh on Vty-line. Can someone please explaim me please whatthose comand do and why i need to use them?
3
votes
1answer
133 views

Hp procurve 2510 ssh problem

My app connects to switches via ssh to gather info from them. I can connect to any model except this one. I get the authentication error from the switch yet i can connect via putty with the same ...
2
votes
1answer
762 views

SSH failing from Cisco to Juniper - SSH2 CLIENT 0: Channel open failed, reason = 1752134516

Not able to SSH from Cisco IOS 15.2(2)E8 to Juniper 14.1X53-D48.1 HOST#show debugging SSH: SSH Client debugging is on HOST#ssh 1.1.1.1 *Feb 11 15:55:47.448: SSH CLIENT0: protocol version id is - ...
2
votes
1answer
630 views

Restrict VTY SSH access to only MGMT VLAN and loopback

For the sake of the fact that i'm not allowed to share actual configuration, every posted config below is made up or altered. We have more than 250 locations spread over our country. All locations ...
3
votes
1answer
31 views

In port forwarding, is the ultimate destination decided solely by the intermediary entity?

In port forwarding, is the ultimate destination to connect to solely decided by the intermediary entity which provides port forwarding, not by an application client? Although the page mentions dynamic ...
0
votes
1answer
25 views

Does “tunnel” here mean the same as tunnelling as in SSH?

From book Data and Computer Communication Tunnel Unlike the proxy and the gateway, the tunnel performs no operations on HTTP requests and responses. Instead, a tunnel is simply a relay point ...
2
votes
1answer
128 views

cisco catalyst creating user fails

I took over a couple of Cisco 2960x switches. They are configured with a telnet login. Now that telnet isn't that great (and my colleagues are afraid of CLI but might have to configure things too) I ...
2
votes
1answer
469 views

“port forwarding” in netcat/socat, ssh, and commerical router

I have seen "port forwarding" associated with netcat/socat, ssh, and configuring server inside the local LAN behind a NAT device. Does it have different meanings in the cases? For example does "...
1
vote
2answers
158 views

IP Domain-name on aggregation layer switch

Hi I was trying to generate ssh key for a switch I read that , ssh key is generated as a combination of hostname and domain-name I created a domain name like test But doubt is , why isn't the ...
2
votes
1answer
40 views

Random intercontinental TCP streams are slow

I have a home server in New Zealand and a remote server in Amsterdam of the following configuration: I have a simple test script: #!/bin/bash for i in `seq 1 20`; do scp root@remoteserver:~/...
1
vote
0answers
22 views

VPN Configuration [closed]

Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
4
votes
1answer
155 views

CISCO IOS's feature Secure Shell Version 2 Enhancements for RSA Keys

I have a switch C3750V2-48PS with IOS ver. 12.2(55)SE5. I wanted to copy to it public key for the ssh client but I do not have following command available Switch#configure terminal Switch(config)#ip ...
25
votes
9answers
18k views

Why use SSH and VPN in combination?

My employer requires me to first log on to a VPN, and only then I can SSH into the servers. But, given the security of SSH, is a VPN overkill? What is the use of a VPN in terms of security if I am ...
1
vote
1answer
33 views

Connecting centos server through Putty [closed]

I have been facing following problem for several days, but i can't find an exact solution. So I have Centos server on Vmware Workstation and i want make a ssh connection through Putty. But i receive ...
1
vote
2answers
603 views

How do I automate ssh sessions with a Router Ericsson IPOS?

I am trying to automate the healthcheck process of a router by running a centralised script from a linux server. I am so far able to access the router server without password prompt using ssh and rsa ...
0
votes
1answer
9k views

“ssh: connect to host myserver port 22: Invalid argument” (intermittent, ipv6, link-local address, dhcp hostname) [closed]

Since this question is off-topic I moved it to Super User. But I was unable to delete it. Here is the new location. Here is the original question: I'm trying to connect to a headless server via my ...
2
votes
1answer
996 views

Cisco IOS public-key auth with privilege 15 and no password

From IOS 15 we can log on Cisco IOS with RSA public key authentication. However we still have to assign a password to the user. If we don't the user can log on without any password (and without the ...
2
votes
3answers
738 views

Bypassing a Cisco Terminal Server Menu

The guys at a config center connect to devices by: placing them on a management rack, and plugging them into a management switch by means of some hwic/RJ45 reverse telnet connection. When you remote ...
2
votes
3answers
690 views

Cisco ISR4450 Router SSH access denied

I configured an ssh connection on an ISR 4451 router, which always worked perfectly. For several weeks, every time I want to connect with Putty via SSH, I get an "access denied". I also cant connect ...
0
votes
1answer
116 views

Remote access ssh on Ubuntu [closed]

I want to enable remote access to my machine. I have thus far enabled port forwarding on router. Lets say the static local ip address of the machine is 192.xxx.x.x. We will cal the ip address that is ...
1
vote
0answers
97 views

SSH into device attached to another router [closed]

I saw this questionwhich looks kind of related, but I'm not sure as the answers are too confusing. Basically, I want to SSH into my Raspberry Pi from my laptop. Eventually I want to have the Pi ...
1
vote
2answers
499 views

SSH Idle Timout Prevention on Router

I know how to prevent a SSH idle timeout on client and server side, but is there a way to configurate this on gateways? I am asking because our company network consists of hundreds of clients and ...
1
vote
1answer
720 views

Cannot ping or SSH into new Catalyst 2960-CX switch from the server VLAN (1)

I recently setup a Cisco Catalyst 2960-CX switch at work (I'm a SysAdmin at a SMB). Our workstations use VLAN 3, but our servers use VLAN 1. The management IP of the new switch (in VLAN 3) is 192.168....
1
vote
1answer
176 views

How to authenticate logins to Ericsson(IPSO) routers without password from shell server

I am very new at networks. I am attempting to automate the health check process of a system network from the main server being a shell OS. I have been successful for some network nodes which are ...