[rancid] no matching cipher found

[Wayne Eisenberg]

Hi all,

I'm working with rancid 3.1 and when I try to connect to some MDS 9148 switches, I get the error message from ssh:

no matching cipher found: client 3des-cbc server aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc

Anyone have any ideas which side the problem is on (rancid host or MDS device) and what can be done to fix it?

Thanks,
Wayne


________________________________

The information in this Internet e-mail (and any attachments) is confidential, may be legally privileged and is intended solely for the Addressee(s) named above. If you are not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, then any dissemination or copying of this e-mail (and any attachments) is prohibited and may be unlawful. If you received this e-mail in error, please immediately notify us by e-mail or telephone, then delete the message. Thank you.

[Heasley]

Post by Wayne Eisenberg
Hi all,
no matching cipher found: client 3des-cbc server aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc
Anyone have any ideas which side the problem is on (rancid host or MDS device) and what can be done to fix it?

See the FAQ S4.

Post by Wayne Eisenberg
Thanks,
Wayne
The information in this Internet e-mail (and any attachments) is confidential, may be legally privileged and is intended solely for the Addressee(s) named above. If you are not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, then any dissemination or copying of this e-mail (and any attachments) is prohibited and may be unlawful. If you received this e-mail in error, please immediately notify us by e-mail or telephone, then delete the message. Thank you.
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo/rancid-discuss

[Wayne Eisenberg]

Cipher support was already in ssh_config. ‘add cyphertype’ for the specific devices in .cloginrc did the trick.

Thanks for the pointers!

From: Heasley [mailto:***@shrubbery.net]
Sent: Thursday, August 11, 2016 4:12 PM
To: Wayne Eisenberg
Cc: rancid-***@shrubbery.net
Subject: Re: [rancid] no matching cipher found

Am 11.08.2016 um 13:06 schrieb Wayne Eisenberg <***@CarolinasIT.com<mailto:***@carolinasit.com>>:

Hi all,

I’m working with rancid 3.1 and when I try to connect to some MDS 9148 switches, I get the error message from ssh:

no matching cipher found: client 3des-cbc server aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc

Anyone have any ideas which side the problem is on (rancid host or MDS device) and what can be done to fix it?


See the FAQ S4.


Thanks,
Wayne


________________________________

The information in this Internet e-mail (and any attachments) is confidential, may be legally privileged and is intended solely for the Addressee(s) named above. If you are not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, then any dissemination or copying of this e-mail (and any attachments) is prohibited and may be unlawful. If you received this e-mail in error, please immediately notify us by e-mail or telephone, then delete the message. Thank you.
_______________________________________________
Rancid-discuss mailing list
Rancid-***@shrubbery.net<mailto:Rancid-***@shrubbery.net>
http://www.shrubbery.net/mailman/listinfo/rancid-discuss

[Hinote, Scotty (MSFC-IS40)[NICS]]

Take a look at your sshd_config for the ciphers string. The device you are connecting to wants a 3des-cbc cipher and you only have aes ciphers enabled in your SSH config. You can see if the device supports other ciphers or add 3des-cbc to your ciphers string in sshd_config and restart SSH service.

I hope that helps.


________________________________
From: Rancid-discuss [rancid-discuss-***@shrubbery.net] on behalf of Wayne Eisenberg [***@CarolinasIT.com]
Sent: Thursday, August 11, 2016 3:06 PM
To: 'rancid-***@shrubbery.net'
Subject: [rancid] no matching cipher found

Hi all,

I’m working with rancid 3.1 and when I try to connect to some MDS 9148 switches, I get the error message from ssh:

no matching cipher found: client 3des-cbc server aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc

Anyone have any ideas which side the problem is on (rancid host or MDS device) and what can be done to fix it?

Thanks,
Wayne


________________________________

The information in this Internet e-mail (and any attachments) is confidential, may be legally privileged and is intended solely for the Addressee(s) named above. If you are not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, then any dissemination or copying of this e-mail (and any attachments) is prohibited and may be unlawful. If you received this e-mail in error, please immediately notify us by e-mail or telephone, then delete the message. Thank you.