WAN Routing
1827853 Members
1783 Online
109969 Solutions
New Discussion

can not SSH to MSR2003

 
hndcb
Occasional Advisor

can not SSH to MSR2003

Hi there,

 

Recently I set up a MSR2003,  after configure SSH Server on MSR2003 and try to use Putty(on a Windows 7 machine) to connect to it, putty always popup this message:  "Couldn't aggress a client-to-server cipher ( available: des-cbc)" .

 

Looks like Putty can not support the algorithm , and I don't know what command to change the default algorithm.

 

The MSR2003 software Version 7.1.042, Release 0007P02 .

 

Here is the steps from the document and I completely followed it:

 

<Router> system-view
[Router] public-key local create rsa
[Router] public-key local create dsa
[Router] ssh server enable
[Router] interface gi0/1
[Router-Ethernet1/1] ip address 192.168.1.40 255.255.255.0
[Router-Ethernet1/1] quit
[Router] user-interface vty 0 4
[Router-ui-vty0-4] authentication-mode scheme
[Router-ui-vty0-4] protocol inbound ssh
[Router-ui-vty0-4] quit
[Router] local-user client001
[Router-luser-client001] password simple aabbcc
[Router-luser-client001] service-type ssh
[Router-luser-client001] authorization-attribute user-role network-admin
[Router-luser-client001] quit
[Router] ssh user client001 service-type stelnet authentication-type password

 

Appreciate for any help.

 

Warren

 

1 REPLY 1
mertdemi
Advisor

Re: can not SSH to MSR2003

Hi Warren

 

new generation hp routers come with low encryption key by default this is why you can not make ssh.

Solution is to get free high encryption license from hp web site.

 

you can find the required information for installation below.

 

http://www8.hp.com/h20195/v2/GetPDF.aspx%2F4AA4-8338ENW.pdf

 

regards