In real time, the 'starting shell for vty' message being written to the log is followed by a pause of several seconds and then finally by an error from WinSCP that says cryptically 'Error skipping startup application. Your shell is probably incompatible with the application (BASH is recommended).' Clicking on the 'OK' button to close out the WINSCP dialog box then will bring up the final line of debug output from the router - Session disconnected - error 0x07.
as you can tell from the debug logging, it looks like the server side is almost without issue (there is the SSH_SMSG_FAILURE error but things seem to proceed fine after that) but it seems that the session times out because for some reason WinSCP won't open the shell?
What are you using WinSCP to connect to? Are you just verifying SSH/SCP on the server? From the router you will create an SSH connection to the server and then SCP will ride over that to transfer the files.
I am using WinSCP on my XP Pro workstation to connect to a 1760 router running a Crypto version of 12.4(17). That router has SSH and SCP enabled as per the document cited in my original post. I have tried using both SFTP and SCP options in the WinSCP startup option field and neither one succeeds although SFTP (with SCP as backup) comes closest, producing the debug shown in the original post.
From debugs it seems that SSH is established and then it times out, being somehow unable to launch an appropriate shell?
I assumed the same thing when I was trying this, but you should not be connecting to the router. It can not handle SCP (think of it as one way, from the router to the server only). From the router, can you connect to the server with SSH? If yes then try copying something from the router to the server with SCP.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :