cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7843
Views
0
Helpful
1
Replies

SSH to ASA : connection reset by peer

Olivier Jessel
Level 1
Level 1

Hi,

I've now 2 ASA devices, running v8.0.3 and 8.0.4 and I'm experiencing some troubles with ssh access from outside.

I used the same config for all ASAs I've deployed... others have no problem.

Here is the error I receive when I try to connect from outside to the ASA :

Error while logging in using SSH: SSH process killed: ssh_exchange_identification: read: Connection reset by peer

On ASA : the debug shows :

Teardown TCP connection 161 for outside:CLIENT_IP/43873 to identity:ASA_IP/22 duration 0:00:00 bytes 0 TCP Reset-I

After... I connect to ASA by ssh from inside, and the outside ssh access is working again... for a random time.

Here is the debug when I connect from inside :

Built inbound TCP connection 162 for inside:CLIENT_LOCAL_IP/4461 (CLIENT_LOCAL_IP/4461) to identity:ASA_INTERNAL_IP/22 (ASA_INTERNAL_IP/22)

7|Nov 06 2008 21:51:43|711002: Task ran for 10 msec, Process = ssh_init, PC = 8ac72dc, Traceback =

7|Nov 06 2008 21:51:43|711002: Task ran for 10 msec, Process = ssh_init, PC = 8ac72dc, Traceback = 0x08AC72DC 0x08AD3BCD 0x08AD1B1E 0x08AD1CC8 0x08AD2D51 0x08ACBAE4 0x0805E983

it seems it activates the ssh process again...or something else ^^

Any idea what could happen ??

about config of the ASA, well, ssh is allowed from inside LAN and outside for one pulic IP.

Thanks for any tips ;-)

CCIE #44658
1 Reply 1

sachinjais
Level 1
Level 1

I encountered same issue with my SAS5510. I googled it and found a working solution for it. I had to remove and re-add the whole SSH configuration to get the SSH access back. Still clueless about why it happened. Still looking for an explanation.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card