When you SSH to old switches from an adjacent switch and you get this error message:
%SSH: CBC Ciphers got moved out of default config. Please configure ciphers as required(to match peer ciphers)
Here is how to fix it. You need to configure this on the client switch.
configure t
ip ssh server algorithm encryption aes128-ctr aes192-ctr aes256-ctr aes128-cbc aes192-cbc aes256-cbc
Once this is applied, your older SSH client should immediately be able to connect to the device again.
No comments:
Post a Comment