Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssh]

Secure Shell or SSH is a network protocol that allows secure communication. For most it is a preferred alternative to Telnet when available. SSH can use automatically or manually generated keys for authentication.

2
votes
1answer
21 views

Hp procurve 2510 ssh problem

My app connects to switches via ssh to gather info from them. I can connect to any model except this one. I get the authentication error from the switch yet i can connect via putty with the same ...
1
vote
0answers
36 views

Why is the 'S' at the front in 'SFTP', 'SSH', and 'SSL' but at the end in 'HTTPS', 'IMAPS', and 'POP3S' [closed]

Every time a question comes up on a test about secure protocols they will always have something like 'FTPS' and 'SFTP' on the same question. Since the 'S' stands for the same thing in all cases, why ...
1
vote
1answer
4k views

SSH failing from Cisco routers to Dell switches

Running into two separate but probably similar issues. First issue - I have two Cisco 2900 Series routers on firmware v15.2(4)M4 trying to ssh into a Dell 5548P stack on firmware v4.1.0.8. All ...
3
votes
3answers
5k views

Switches 'HPE OfficeConnect 1920S' - Enable SSH / TFTP Services

We need to manage switches HPE OfficeConnect 1920S remotely but only HTTP/HTTPS Administration is available. HPE 1920S has an special operating system, neither Procurve nor Comware. We are looking ...
2
votes
1answer
153 views

SSH failing from Cisco to Juniper - SSH2 CLIENT 0: Channel open failed, reason = 1752134516

Not able to SSH from Cisco IOS 15.2(2)E8 to Juniper 14.1X53-D48.1 HOST#show debugging SSH: SSH Client debugging is on HOST#ssh 1.1.1.1 *Feb 11 15:55:47.448: SSH CLIENT0: protocol version id is - ...
3
votes
1answer
77 views

Restrict VTY SSH access to only MGMT VLAN and loopback

For the sake of the fact that i'm not allowed to share actual configuration, every posted config below is made up or altered. We have more than 250 locations spread over our country. All locations ...
2
votes
1answer
20 views

In port forwarding, is the ultimate destination decided solely by the intermediary entity?

In port forwarding, is the ultimate destination to connect to solely decided by the intermediary entity which provides port forwarding, not by an application client? Although the page mentions ...
0
votes
1answer
17 views

Does “tunnel” here mean the same as tunnelling as in SSH?

From book Data and Computer Communication Tunnel Unlike the proxy and the gateway, the tunnel performs no operations on HTTP requests and responses. Instead, a tunnel is simply a relay point ...
2
votes
1answer
43 views

cisco catalyst creating user fails

I took over a couple of Cisco 2960x switches. They are configured with a telnet login. Now that telnet isn't that great (and my colleagues are afraid of CLI but might have to configure things too) I ...
0
votes
1answer
52 views

Login local , login synchronous

I dont understand what those two comands mean when im enabling ssh on Vty-line. Can someone please explaim me please whatthose comand do and why i need to use them?
2
votes
1answer
362 views

“port forwarding” in netcat/socat, ssh, and commerical router

I have seen "port forwarding" associated with netcat/socat, ssh, and configuring server inside the local LAN behind a NAT device. Does it have different meanings in the cases? For example does "...
1
vote
2answers
88 views

IP Domain-name on aggregation layer switch

Hi I was trying to generate ssh key for a switch I read that , ssh key is generated as a combination of hostname and domain-name I created a domain name like test But doubt is , why isn't the ...
2
votes
1answer
28 views

Random intercontinental TCP streams are slow

I have a home server in New Zealand and a remote server in Amsterdam of the following configuration: I have a simple test script: #!/bin/bash for i in `seq 1 20`; do scp root@remoteserver:~/...
2
votes
0answers
19 views

VPN Configuration [closed]

Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
4
votes
1answer
68 views

CISCO IOS's feature Secure Shell Version 2 Enhancements for RSA Keys

I have a switch C3750V2-48PS with IOS ver. 12.2(55)SE5. I wanted to copy to it public key for the ssh client but I do not have following command available Switch#configure terminal Switch(config)#ip ...
23
votes
9answers
10k views

Why use SSH and VPN in combination?

My employer requires me to first log on to a VPN, and only then I can SSH into the servers. But, given the security of SSH, is a VPN overkill? What is the use of a VPN in terms of security if I am ...
1
vote
1answer
25 views

Connecting centos server through Putty [closed]

I have been facing following problem for several days, but i can't find an exact solution. So I have Centos server on Vmware Workstation and i want make a ssh connection through Putty. But i receive ...
1
vote
2answers
254 views

How do I automate ssh sessions with a Router Ericsson IPOS?

I am trying to automate the healthcheck process of a router by running a centralised script from a linux server. I am so far able to access the router server without password prompt using ssh and rsa ...
0
votes
1answer
2k views

“ssh: connect to host myserver port 22: Invalid argument” (intermittent, ipv6, link-local address, dhcp hostname) [closed]

Since this question is off-topic I moved it to Super User. But I was unable to delete it. Here is the new location. Here is the original question: I'm trying to connect to a headless server via my ...
3
votes
1answer
730 views

Cisco IOS public-key auth with privilege 15 and no password

From IOS 15 we can log on Cisco IOS with RSA public key authentication. However we still have to assign a password to the user. If we don't the user can log on without any password (and without the ...
2
votes
3answers
308 views

Bypassing a Cisco Terminal Server Menu

The guys at a config center connect to devices by: placing them on a management rack, and plugging them into a management switch by means of some hwic/RJ45 reverse telnet connection. When you remote ...
2
votes
3answers
219 views

Cisco ISR4450 Router SSH access denied

I configured an ssh connection on an ISR 4451 router, which always worked perfectly. For several weeks, every time I want to connect with Putty via SSH, I get an "access denied". I also cant connect ...
0
votes
1answer
29 views

Remote access ssh on Ubuntu [closed]

I want to enable remote access to my machine. I have thus far enabled port forwarding on router. Lets say the static local ip address of the machine is 192.xxx.x.x. We will cal the ip address that is ...
1
vote
0answers
64 views

SSH into device attached to another router [closed]

I saw this questionwhich looks kind of related, but I'm not sure as the answers are too confusing. Basically, I want to SSH into my Raspberry Pi from my laptop. Eventually I want to have the Pi ...
1
vote
2answers
118 views

SSH Idle Timout Prevention on Router

I know how to prevent a SSH idle timeout on client and server side, but is there a way to configurate this on gateways? I am asking because our company network consists of hundreds of clients and ...
1
vote
1answer
278 views

Cannot ping or SSH into new Catalyst 2960-CX switch from the server VLAN (1)

I recently setup a Cisco Catalyst 2960-CX switch at work (I'm a SysAdmin at a SMB). Our workstations use VLAN 3, but our servers use VLAN 1. The management IP of the new switch (in VLAN 3) is 192.168....
1
vote
1answer
95 views

How to authenticate logins to Ericsson(IPSO) routers without password from shell server

I am very new at networks. I am attempting to automate the health check process of a system network from the main server being a shell OS. I have been successful for some network nodes which are ...
1
vote
1answer
59 views

Pinging/ssh-ing into just trunk interface. How is it done? [closed]

I'm a junior network technician and I was tasked at work to do a switch upgrade. The most important part of this task is to set up SSH so we can at least get into the switch remotely configure once ...
2
votes
3answers
684 views

Can I limit Cisco IOS login to specific users?

I have a Cisco IOS router that is used for WAN access. I have 2 additional users defined with less privilege to check status and to use ssh. I wonder if it is possible to restrict certain user to only ...
-1
votes
1answer
52 views

SSH and port forwardings in both directions [closed]

I can't undersatand this : All communication happens using SSH with port forwardings in both directions Any help? Thanks.
4
votes
3answers
3k views

How to install SSL key and certificate on SG 300-10 (and SSH functionality)

How to install our own SSL key and certificate on a SG-300-10 switch? The manual simply doesn't seem to bear much resemblance to what's available in the web interface. According to the manual, one ...
3
votes
2answers
169 views

Why http + ssh is not popular? [closed]

Can HTTP be used with SSH ? If yes, why has it not been as popular as HTTP over SSL ?
1
vote
1answer
418 views

Tunneling HTTP request over SSH [closed]

I'm having this webserver inside my network behind a firewall. I also have this VPS outside my network, which is publicly reachable. Now, I was wondering if it would be possible to tunnel a connection ...
1
vote
1answer
61 views

Cisco: Return key needed after remote ssh console access using rotaries

I´m configuring a remote ssh access with TACACS to a console in a Cisco 2911, on a rotary port. When the access is granted after a successful ssh authentication, an Return key is needed to access the ...
1
vote
3answers
84 views

How do protocols get blocked even over open ports?

This might be a stupid question, but I'm wondering how a network blocks a protocol like SSH even if the server is listening on port that isn't blocked, like 80. I've even tried port forwarding an non-...
4
votes
1answer
1k views

Can you SSH to a Cisco switch without a Username

Is there a way of setting up a Cisco swtich (Cisco Catalyst 3850 12 Port GE SFP IP Base - its not arrived so I don't know the IOS) to allow SSH without specifying a USERNAME The customer currently ...
0
votes
1answer
60 views

How does a network switch affect SSH? [closed]

My job requires that I have access information on multiple machines via SSH. Unfortunately, due to some ongoing remodeling, there are now more machines than there are available ethernet ports, and I ...
2
votes
1answer
5k views

Configure SSH cipher on Cisco IOS 12.2(55)SE7

Today a customer contacted me because he has upgraded his MacBook to MacOS X Sierra and since then, when trying to access a switch via SSH he got the message Unable to negotiate with 10.XX.XX.XX ...
1
vote
0answers
128 views

Monitoring interfaces on VyOS then SSH output to another machine (Security Onion) [closed]

I am trying to figure out the best way I can monitor interfaces on a VyOS interface from a Security Onion instance using Squil (Snort alerts etc). I am thinking SSH to VyOS to activate monitor ...
3
votes
1answer
1k views

Cisco SSH disconnect

I have a Cisco 867VAE with 15.5(3)M which is disconnecting from a particular legitimate SSH client with %SSH-4-SSH2 _UNEXPECTED_MSG: Unexpected message type It's on a bench, not in service. I have ...
1
vote
1answer
655 views

Cisco TACACS authentication config

I'm inheriting a DoD network (completely separated from the Internet). I'm looking at the configs and I'm seeing a bunch of stuff I think isn't needed but I've never used TACACS, just Radius. The ...
14
votes
3answers
13k views

how to block ssh tunneling traffic?

if someone were to set up an ssh tunnel to/from work or home, is there a way to prevent future SSH tunneling traffic? I understand that websense can block traffic, but users who use ssh tunneling can ...
2
votes
3answers
2k views

When using SSH, why it doesn't ask for a username and it's corresponding password?

Here is the running-config for the line vty: line vty 0 4 password 1111 login local transport input ssh line vty 5 15 password 1111 login local transport input ssh However, when I type ssh -l domain-...
3
votes
2answers
8k views

Telnet or SSH into a Cisco router

I would like to log into a Cisco router that is in a LAN via telnet or ssh as user <username> with a password <password> only from machines in the LAN 192.168.2.0/24 About the user: I ...
1
vote
2answers
2k views

Cisco `ip ssh source-interface` refers to server, client, or both?

If I do ip ssh source-interface g0, that restricts: which interface the Cisco device listens for SSH connections, which interface it is allowed to use for the client to connect to other SSH servers, ...
1
vote
3answers
994 views

cisco ssh key authorization level via radius

Related to Authenticate ssh key via Cisco ACS (TACACS+) Given a working ssh public key config: ip ssh pubkey-chain username admin key-string <ssh-pub-key> exit exit I have only been ...
1
vote
2answers
2k views

JunOS ssh debugging

Our Junipers will not accept my ssh keys when I provide them from my favorite Windows client. On a FreeBSD machine, I would restart sshd with the -d flag and just watch the output to discover why the ...
5
votes
2answers
7k views

Why do I get a timeout when I connect via ssh to a Cisco ASA, even though management and ACLs are configured?

I set up a Cisco ASA 5505 8.4(3), and specified ssh version 2 enabled ssh access to the WAN interface via ssh <my network> <mask> <WAN interface> allowed ssh from my network via an ...
3
votes
2answers
1k views

Cisco ASA 5585 SSH LDAP Authentication

I am attempting to setup Microsoft LDAP authentication, for SSH only, for a specific security group on a Cisco ASA 5585 version 8.2(5) using the ASDM. The lookup and authentication is working, however ...
1
vote
1answer
2k views

How to fiter non SSH traffic in Wireshark

I am trying to monitor behaviour of packets from my PC -> VirtualBox machine which represents a virtual router, and I have established SSH session to it. My question is, how to filter out all SSH ...