Forum Discussion
cxcal_18687
Nimbostratus
Feb 08, 2011FTP over SSH Issue
I've seen a few post regarding some of the roadblocks with getting FTP over SSH to work. But I have reviewed my config and having issues.
Configured VIP on port 22 with SNAT automap, and the...
cxcal_18687
Nimbostratus
Feb 08, 2011I noticed with SmartFTP client that when I attempted to connect thru the VIP it complains about:
[15:43:21] Client to Server Encryption: aes128-ctr
[15:43:21] Server to Client Encryption: aes128-ctr
[15:43:21] Session MAC: hmac-sha1
[15:43:21] Client to Server Compression: zlib@openssh.com
[15:43:21] Server to Client Compression: zlib@openssh.com
[15:43:21] Requesting service "ssh-userauth".
[15:43:21] RTT: 197.205 ms
[15:43:21] Authentication request. Method: none
[15:43:21] Server supported authentications: publickey,gssapi-with-mic,password
[15:43:21] Authentication request. Method: password
[15:43:24] Authentication request. Method: gssapi-with-mic
[15:43:24] User authentication failed
When I connect directly to the server on port 5022, I get connected with no issues:
[15:40:37] Client to Server Encryption: aes128-cbc
[15:40:37] Server to Client Encryption: aes128-cbc
[15:40:37] Session MAC: hmac-sha1
[15:40:37] Client to Server Compression: none
[15:40:37] Server to Client Compression: none
[15:40:37] Requesting service "ssh-userauth".
[15:40:37] RTT: 53.458 ms
[15:40:37] Authentication request. Method: none
[15:40:37] Server supported authentications: keyboard-interactive,publickey,password
[15:40:37] Authentication request. Method: password
[15:40:37] User authentication successful.
[15:40:37] SSH session established
The difference I noticed was with the 1st two lines (aes128-cbc) compared to (aes128-ctr) on the failed login from the VIP.
Is this something that can be changed on the LTM?
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
