Forum Discussion

f5beginner's avatar
f5beginner
Icon for Cirrostratus rankCirrostratus
Aug 09, 2019

SSH proxy not working

Hi All,   I used this instructions: https://techdocs.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-12-1-0/13.html to configure ssh proxy, but with...
BIG-IP
LTM
security
  • Dmitry's avatar
    Dmitry
    Aug 12, 2019

    Your public key have to look like:

    ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCziS6yavPpFuRjLP9hzRiEBcVgLDynoWqNMuwCrOREkSiDqWqFRrydFCGy6Z1WwwJuDMIw5h3sIuqtOo78zd6pBabXpj0QLUyLtGx80Oe3vInpwxvG2/YX9KaGjofkasZJ+tOqoOe5QscnUYr7Iw6CEuo2dBVIZyL/o1IyTvDfL8+yXO4vPzadmL0gvV1F56feRVsCF0HUrhWwdrQ6CpIpX6acsY0HayrhOGPmVF4qRz7fLySHJ5XQz5IKXJRNHJEbXx2tiV1TuQlhz8gOMqMp2IiSqyKDcUTk2Oy0fPYkNAWPlifq7GplYkit85EL5UCgtHf595rqibOQJWFAAzHF 

     

    It have to be one long string, without any newlines. And without "email" at the end of the string.

     

    If all correct you can try to find HostKey directives on your backend ssh server config and comment out all except the rsa, like this:

    HostKey /etc/ssh/ssh_host_rsa_key

    #HostKey /etc/ssh/ssh_host_ed25519_key

     

Dmitry's avatar
Dmitry
Icon for Altocumulus rankAltocumulus
Aug 12, 2019

You have to use /etc/ssh/ssh_host_rsa_key.pub instead of root/.ssh/id_rsa.pub.

And as it written in docs to v.15 - Make sure not to include the trailing comment.

 

I did it and now I not receiving this error message in log but I'm still cant connect - after I'm entered the password it hangs up and then closed -_-