How to enable ssh client to support ssh server version 1 and 2
problem
When remote ssh to server version 1 the message will warn like this . because default version of ssh client is version 2.
root@tproxy:/etc# ssh root@192.168.229.1
Protocol major versions differ: 2 vs. 1
root@tproxy:/etc#
ssh software for ssh client
root@tproxy:/etc/ssh# ssh -V
OpenSSH_5.5p1 Debian-6+squeeze1, OpenSSL 0.9.8o 01 Jun 2010
root@tproxy:/etc/ssh#
How to resolve
root@tproxy:/etc# vi /etc/ssh/ssh_config
unmark # in line protocol 2,1 to enable both version 1 and 2
Protocol 2,1
save and restart service ssh by command
root@tproxy:~# /etc/init.d/ssh restart
Restarting OpenBSD Secure Shell server: sshd.
root@tproxy:~#
===========
Test for version 1
root@tproxy:~# ssh cisco@192.168.229.129
The authenticity of host '192.168.229.129 (192.168.229.129)' can't be established.
RSA1 key fingerprint is 6f:37:40:fe:19:ed:67:5a:89:85:e7:e5:8f:9d:a5:09.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.229.129' (RSA1) to the list of known hosts.
cisco@192.168.229.129's password:
R1>sh ip ssh
SSH Enabled - version 1.5
Authentication timeout: 120 secs; Authentication retries: 3
R1>
Test for version 2
root@tproxy:~# ssh cisco@192.168.229.129
WARNING: RSA1 key found for host 192.168.229.129
in /root/.ssh/known_hosts:1
RSA1 key fingerprint 6f:37:40:fe:19:ed:67:5a:89:85:e7:e5:8f:9d:a5:09.
+--[RSA1 1024]----+
| |
| |
| . |
| o .. |
| S o ...o.|
| . o +=.o|
| o E..o*|
| . . o X+|
| =.o|
+-----------------+
The authenticity of host '192.168.229.129 (192.168.229.129)' can't be established
but keys of different type are already known for this host.
RSA key fingerprint is aa:f8:94:e1:a7:d2:c8:56:44:94:44:37:65:7f:d7:c0.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.229.129' (RSA) to the list of known hosts.
Password:
R1>sh ip ssh
SSH Enabled - version 2.0
Authentication timeout: 120 secs; Authentication retries: 3
R1>
More info for ssh config file
ReplyDeletessh client = /etc/ssh/ssh_config
ssh serer = /etc/ssh/sshd_config