Questions tagged [ssh]

Secure Shell or SSH is a network protocol that allows secure communication. For most it is a preferred alternative to Telnet when available. SSH can use automatically or manually generated keys for authentication.

Filter by
Sorted by
Tagged with
3
votes
2answers
14k views

Telnet or SSH into a Cisco router

I would like to log into a Cisco router that is in a LAN via telnet or ssh as user <username> with a password <password> only from machines in the LAN 192.168.2.0/24 About the user: I ...
1
vote
2answers
3k views

Cisco `ip ssh source-interface` refers to server, client, or both?

If I do ip ssh source-interface g0, that restricts: which interface the Cisco device listens for SSH connections, which interface it is allowed to use for the client to connect to other SSH servers, ...
1
vote
2answers
494 views

SSH Idle Timout Prevention on Router

I know how to prevent a SSH idle timeout on client and server side, but is there a way to configurate this on gateways? I am asking because our company network consists of hundreds of clients and ...
2
votes
3answers
4k views

When using SSH, why it doesn't ask for a username and it's corresponding password?

Here is the running-config for the line vty: line vty 0 4 password 1111 login local transport input ssh line vty 5 15 password 1111 login local transport input ssh However, when I type ssh -l domain-...
2
votes
1answer
995 views

Cisco IOS public-key auth with privilege 15 and no password

From IOS 15 we can log on Cisco IOS with RSA public key authentication. However we still have to assign a password to the user. If we don't the user can log on without any password (and without the ...
2
votes
2answers
4k views

How to fiter non SSH traffic in Wireshark

I am trying to monitor behaviour of packets from my PC -> VirtualBox machine which represents a virtual router, and I have established SSH session to it. My question is, how to filter out all SSH ...
3
votes
3answers
1k views

Can I limit Cisco IOS login to specific users?

I have a Cisco IOS router that is used for WAN access. I have 2 additional users defined with less privilege to check status and to use ssh. I wonder if it is possible to restrict certain user to only ...
1
vote
2answers
3k views

JunOS ssh debugging

Our Junipers will not accept my ssh keys when I provide them from my favorite Windows client. On a FreeBSD machine, I would restart sshd with the -d flag and just watch the output to discover why the ...
3
votes
1answer
999 views

Could accessed sites over an SSH tunnel be tracked by ISP? [closed]

I created an SSH tunnel and using it as SOCKSv5 proxy on Firefox. I checked whatismyipaddress.com and some other sites, they could not detect a proxy on my computer and shows my location on the server'...
1
vote
1answer
946 views

SSH access to router via inband and OOB ports

I am aware of management VRF where inband port and OOB port on router can be part of and support SSH access to the router from both management port and network port. In this case inband port(network ...
2
votes
1answer
5k views

Configure SSH cipher on Cisco IOS 12.2(55)SE7

Today a customer contacted me because he has upgraded his MacBook to MacOS X Sierra and since then, when trying to access a switch via SSH he got the message Unable to negotiate with 10.XX.XX.XX ...
1
vote
0answers
715 views

Issues with port forwarding with Layer 3 switch [closed]

Since I have upgrade my switch, I have been experiencing issues with port forwarding on my pfSense gateway. I have done some researching on google, but didn't come to any conclusive results. ...
2
votes
3answers
7k views

is a vty password requierd if i have login local set with a username and a password

i am trying to configure the switch to have both telnet and ssh. from what i understand the "login local" command will tell the switch to ask for the user name and password i've configured using ...
1
vote
3answers
2k views

cisco ssh key authorization level via radius

Related to Authenticate ssh key via Cisco ACS (TACACS+) Given a working ssh public key config: ip ssh pubkey-chain username admin key-string <ssh-pub-key> exit exit I have only been ...
0
votes
1answer
2k views

Is there a way to automatically have unused ports disable?

Like many others I can see how to display ports that have no traffic flowing through them and go through and disable them but we have hundreds of cisco switches. I like the idea of being able to see ...
1
vote
2answers
934 views

Alcatel OS6860E ethernet ssh

I set up on an Alcatel OS6960E (via console cable) a VLAN 99 with ip addr 192.168.164.33. My laptop ethernet ip is 192.168.164.29. I connected my laptop to ethernet port 1/1/1 assigned to VLAN 99 ...
1
vote
1answer
4k views

HP ProCurve switch off weak ciphers - disable SSH CBC Mode Ciphers and RC4

Is there any option for HP switches to change/modify used ssh ciphers? For exmaple in cisco we can issue commands: ip ssh server algorithm encryption aes256-ctr ip ssh server algorithm mac hmac-sha1 ...
0
votes
3answers
2k views

Step by Step to get on to Telnet ? Management?

I need to combine 3 switches in to 1 terminal so i dont have to keep switching my console cable to each switch, so its something called telnet., there is also something about making a "management ...
2
votes
2answers
12k views

debug crypto ipsec via ssh

How to debug IP Sec VPN on ASA using SSH? I try debug crypto ipsec terminal monitor logging monitor it asks for completion if i choose debug, all debug info are flooded. How do i view just IPSEC ...
1
vote
2answers
6k views

SSH failing from Cisco routers to Dell switches

Running into two separate but probably similar issues. First issue - I have two Cisco 2900 Series routers on firmware v15.2(4)M4 trying to ssh into a Dell 5548P stack on firmware v4.1.0.8. All ...
1
vote
0answers
62 views

VPN over Crappy ISP [closed]

Like many folks, I have a crappy ISP. Every couple of minutes, my ISP will drop a handful of packets. For "normal" activity such as web browsing, emailing, or even netflix, it works great; no one ...
0
votes
1answer
533 views

CISCO Switch SSH Certificate via TACACS-Server

I'm currently a trainee, and I am assigned to do a task where I have to find out whether it is possible if a switch can get its certificate by contacting the TACACS-Server. To explain what I'm trying ...
1
vote
2answers
2k views

Nexus OS authenticate via ssh key

on the catalyst IOS I hadn't had any problems with activating the ssh auth via public key, but on the Nexus OS I can't seem to find the option. Is it even implemented in some NX-OS version?
1
vote
1answer
390 views

DELL Powerconnect 5324 SSH

it sounds a bit strange, but how can i find out the IP Address which i can connect to? The Switch works fine, but i need to do some changes. I have console access to it, but i want it, because it's ...
0
votes
1answer
2k views

password recovery ASA

I need to do a password recovery on an ASA5525X. I only have a 30 minute window to get it done. The ASA got locked out. No access to SSH or console access. Console access got locked out because I ...
1
vote
1answer
289 views

How to get real source address of a packets in NAT'd VM [closed]

Host OS Ubuntu with live IP address 1.2.3.4 . And a Ubuntu VM running in Virtual Box with NAT network configuration. I need to SSH my VM from external network with IP address 3.3.3.3 . So I configure ...
3
votes
1answer
4k views

How to specify username for SSH in Juniper router?

Model: ACX2200 Version : 15.1X54-D10.5 I have two Juniper routers connected back-to-back , first router is enabled with TACACS login. Second router is not enabled with TACACS login yet. So to ...
3
votes
1answer
2k views

How do I auto-enable on an ssh public key login on an ASA?

I am trying to allow an ssh session to auto-enable on my ASA. I am enable to ssh to the asa with the public key and get directly to a non-enabled prompt, but I want that prompt to enter in enabled ...
1
vote
1answer
705 views

Tunneling HTTP request over SSH [closed]

I'm having this webserver inside my network behind a firewall. I also have this VPS outside my network, which is publicly reachable. Now, I was wondering if it would be possible to tunnel a connection ...
3
votes
1answer
955 views

Port forwarding doesn't work

I'm using an EdgeMAX router. From the GUI, I'm trying to forward the WAN (eth1) port 22 to the LAN (eth2) port 22 to a local IP address (172.16.12.3) to allow SSH from outside my network. When I tried ...
3
votes
2answers
174 views

Why http + ssh is not popular? [closed]

Can HTTP be used with SSH ? If yes, why has it not been as popular as HTTP over SSL ?
25
votes
9answers
18k views

Why use SSH and VPN in combination?

My employer requires me to first log on to a VPN, and only then I can SSH into the servers. But, given the security of SSH, is a VPN overkill? What is the use of a VPN in terms of security if I am ...
2
votes
1answer
467 views

“port forwarding” in netcat/socat, ssh, and commerical router

I have seen "port forwarding" associated with netcat/socat, ssh, and configuring server inside the local LAN behind a NAT device. Does it have different meanings in the cases? For example does "...
2
votes
1answer
86 views

Why are there so many different Network File Systems & File Transfer Protocols? [closed]

I've been spending a lot of time trying to learn different Network File Systems & File Transfer Protocols etc. in order to integrate three different devices with three different Operating Systems: ...
2
votes
1answer
107 views

Cant connect to PC via SSH

I use Windows 7 on my desktop. I tried to connect my Android to my PC via Wi-Fi connection. SSH port 22 is open on my desktop. I use Connectbot to connect to my pc . The result of ipconfig: C:\...
1
vote
1answer
82 views

Headless Raspberry Pi has different IP address than the interface it is connected to?

I have a Raspberry Pi connected to my Macbook Pro via ethernet, so I'm basically sharing my Macbook Pro's internet connection with my Raspberry Pi. I am connecting to my Raspberry Pi via SSH. The ...
3
votes
2answers
2k views

Sonicwall - SSH to change admin password

Is it possible to reset a password for the admin account on a Sonicwall via SSH?
7
votes
3answers
3k views

Is the Nth ports on 127.0.0.1 and 127.0.0.2 same ?

I want to create ssh tunnels between 2 clients and 1 server. Can I use the same port numbers for both but binding one of them to 127.0.0.1:N and the other to 127.0.0.2:N ? Are these ports same or can ...
0
votes
1answer
176 views

explanation of ssh tunnel and forwarding options [closed]

I can't seem to figure out the difference between the ssh options -L -D -W and -w .. They all appear to offer some variation of tunneling, but I'm not too proficient in networking, and the manpage ...
0
votes
1answer
162 views

Is “Partial Connection” without VPN possible? [closed]

I have come across a strange issue, and even as I type the question here, I wonder if folks will simply reject it as "impossible", but still, the experts here may have some inputs. Recently I had ...
3
votes
1answer
3k views

How to detect port changes in real time on Cisco 4506

Is it possible to detect if any cable was connected/disconnected in real time via Telnet session on Cisco Catalyst 4506? For example, I have an IBM Switch EN94093R that does it by default, when I ...
2
votes
2answers
1k views

How do I I test ip ssh dh min size on two cisco routers?

The requirement is that when DH min size is set to group 14 (2048) a session using DH group 1 (1024) is not allowed How can I really test this requirement on 2 CISCO routers. Do I need to configure ...
1
vote
1answer
297 views

SSH to Cisco ASA 5505

According to this documentation it should be possible to enable an SSH connection to a Cisco ASA 5505. However, it is not possible to ping an IP from the ASA while this has been configured. As it is ...
2
votes
3answers
11k views

How to assign a static IP to a Cisco Layer 3 switch in order to connect using SSH?

The steps of this manual have been executed in order to configure SSH. Once SSH has been configured, how to access the switch from a computer using SSH? The following steps have been executed in ...
6
votes
2answers
5k views

Does anyone know how to import ssh public key to ASR9K (IOS-XR)?

I am trying to login ASR9001 router using ssh public key authentication. I tried to import my ssh public key to the router but no success. RP/0/RSP0/CPU0:ASR9K-1#crypto key import authentication rsa ...
10
votes
1answer
7k views

Authenticate ssh key via Cisco ACS (TACACS+)

I can set a router to authenticate via a ssh public-key with: ip ssh pubkey-chain username admin key-string <ssh-pub-key> exit exit Is it possible to do something similar with Cisco ...
1
vote
1answer
361 views

SSH configuration is not found in Running-config in packet tracer

I opened up Packet tracer and configured SSH on a switch (2960) and logged to that switch from a PC. SSH was working. But when I see the running config, no ssh or crypto key configurations could be ...
3
votes
3answers
2k views

Cisco ASA 5585 SSH LDAP Authentication

I am attempting to setup Microsoft LDAP authentication, for SSH only, for a specific security group on a Cisco ASA 5585 version 8.2(5) using the ASDM. The lookup and authentication is working, however ...
3
votes
2answers
894 views

Domain name for SSH

What is the purpose of a domain name to create SSH keys? Before enabling SSH on firewall/router, we need to create domain name. Why is it necessary to do that? What does a domain name do and how is ...
9
votes
3answers
7k views

Cisco can't connect to Juniper device via SSH - Invalid modulus length

I'm trying to connect from a Cisco 886VA to a Juniper EX2200 via SSH. The connection fails with the following messages on the Cisco: *Jan 17 09:51:20.823: SSH2 CLIENT 0: Server has chosen 2056 -bit ...