For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ichnafi's avatar
Ichnafi
Icon for Cirrostratus rankCirrostratus
May 25, 2018

Why only two supported ciphers in ssh_config

Hello everyone, I recently tried to copy a file via scp from a BIG-IP and failed by "not matching ciphers". I had a look into it and stumbled upon the fact, that by default only aes128-cbc and aes2...
application delivery
BIG-IP
Sunny_291145's avatar
Sunny_291145
Icon for Nimbostratus rankNimbostratus
May 25, 2018

This is a Known Issue: bug id is 663508

 

SSH Connection issue from BIG-IP to backend servers

 

Solution

 

Modify SSH Client configuration

 

Open up the /config/ssh/ssh_config file and make the following change

 

Before: Ciphers aes128-cbc,aes256-cbc

 

After: Ciphers aes128-cbc,aes256-cbc,aes256-ctr,aes128-ctr,aes192-ctr

 

  • Ichnafi's avatar
    Ichnafi
    Icon for Cirrostratus rankCirrostratus
    May 28, 2018

    Are you sure that bug ID is correct? Bug Tracker can not find any results.

     

  • Sunny_291145's avatar
    Sunny_291145
    Icon for Nimbostratus rankNimbostratus
    May 29, 2018

    When I had an issue in Nov-2017 I opend up a case with F5 and they provided me this bug-ID.