topic Re: SSH in ICX Switches

SSH

sdc — Sat, 16 Dec 2023 01:40:07 GMT

Hi team,

I am having SSH issues, using putty 0.79 and after generating crypto keys I can connect but after 10 to 15 seconds or so the session locks up or I get a connectivity loss, "software caused connection abort"

Sam.

Re: SSH

Chandini — Sat, 16 Dec 2023 15:52:16 GMT

Hi Sdc

Thank you for reaching us.

Could you please help us with switch model and version running on the switch ?
Are you able to access the switch using console or telnet ?

Try to gain access to the switch using console or telnet and check the below outputs and see if the SSH is enabled or disabled

show ip ssh config
show ip ssh

When you saw ""software caused connection abort"" did the switch reload or freeze on its own ? If no then were you able to connect to the switch again using SSH ?

Thanks

Re: SSH

sdc — Sat, 16 Dec 2023 23:24:49 GMT

Re: SSH

sdc — Sat, 16 Dec 2023 23:31:20 GMT

Hi,

Thank you for your reply, the switch is a ICX-7150-C12P, running SPR08095m firmware.

I can access the switch via console and telnet without issues, however SSH connections using Putty, iterm, ssh via a debian/mac os terminal will connect but after roughly 10seconds or so the session will freeze or lockup. I can regain access if I restart a new session.

The switch does not freeze or reload.

SSH@ICX7150#sh ip ssh config
SSH server : Enabled
SSH port : tcp\22
Host Key : RSA 2048
Encryption : aes256-cbc, aes192-cbc, aes128-cbc, aes256-ctr, aes192-ctr, aes128-ctr, 3des-cbc
Permit empty password : No
Authentication methods : Password, Public-key, Interactive
Authentication retries : 3
Login timeout (seconds) : 120
Idle timeout (minutes) : 30
Strict management VRF : Disabled
SCP : Enabled
SSH IPv4 clients : All
SSH IPv6 clients : All
SSH IPv4 access-group :
SSH IPv6 access-group :
SSH Client Keys :
Client Rekey : 0 Minute, 0 KB
Server Rekey : 0 Minute, 0 KB

SSH@ICX7150#sh ip ssh
Connection Version Encryption Username HMAC Server Hostkey IP Address
Inbound:
1 SSH-2 aes256-ctr sam hmac-sha1 ssh-rsa 10.40.203.33
2 SSH-2 aes256-ctr sam hmac-sha1 ssh-rsa 10.40.203.33
3 SSH-2 aes256-ctr sam hmac-sha1 ssh-rsa 10.40.203.33
Outbound:

SSH-v2.0 enabled; hostkey: RSA(2048)

Re: SSH

sdc — Mon, 25 Dec 2023 04:31:59 GMT

Any news on this, still having issues with ssh stability

Re: SSH

BenBeck — Mon, 25 Dec 2023 19:31:59 GMT

I would advise opening a support case to get official support on this issue.

Re: SSH

jedix — Tue, 10 Jun 2025 02:04:23 GMT

Try this wonderfully short and totally secure option:

ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 -c 3des-cbc -oHostKeyAlgorithms=+ssh-rsa -mhmac-sha1 user@ip.address