Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

ACE30 SSH login issue after image upload

 

 

Hi,

 

Currently I am running ACE30 with version A4(2.2),

I am doing upgarde with A5(3.0) But whenever i upload image to ACE i cannot login ACE via SSH but telnet works fine.

 

I tried to remove ssh keys, generated new keys even then no ssh login.

Then i reload ACE with old image then ssh login start coming. I would appreciate if someone share the same experience and any permanent logical fix.

 

Regards 

 

 

 

  • Application Networking
6 REPLIES
Cisco Employee

Hi,I searched internally as

Hi,

I searched internally as well and i don't see any issue. Can you get the below information:

show ssh key

show ssh maxsessions

also, do ssh key rsa 1024 force and try again.

Can you also get the pcaps on client who is trying to do SSH as well as the show tech from Admin context? Are you trying to do SSH to Admin context or another context?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

  Hi,  I have tried all the

 

 

Hi,

 

 I have tried all the options but to no vain, i removed ssh key n generated with , 

768, 1024, etc etc..

Already verified ssh maxsessions 16, 

I am trying SSH to admin context. PCAP attached from client nonworking when image uploaded and working after ACE reload,

 

 

Client: Source ip: 10.1.29.98,   destination IP : 10.1.29.97 ACE vlan20

 

Actually, during non-working time, only after three way handshake, FIN ACK initiated from ACE and no encryption request is initiated while during working scenario after three way handshake , client three way handshake is initiated and session establish.

 

 

attached zip file containing

attached zip file containing pcap

  Hi, As told earlier, once i

 

 

Hi,

 

As told earlier, once i'll reload ACE , SSH will start working.

 

But the issue occur once you upload image after that SSH stop working.

 

you can recreate this issue as many times as you like. 

Regards

Cisco Employee

Hi Nadeem,If the issue is 100

Hi Nadeem,

If the issue is 100% reproducible, then this could be a bug but i haven't seen anything like reported here. There have been lot of upgrades to A530 in the field. Do you have show tech during the problem along with show logging? I would suggest to open a TAC case with this and collect pcaps as well as show tech along with syslogs during the problem and let them go to development for further analysis if show tech doesn't tell what is going on. That's the proper channel  to address the issue.

There was this recent DDTS:

CSCup61227    ACE 30 A5(3.0) - Warning:- MTS queue is full opcode 4062sap%d pid %d

I need to see if you are getting the similar message. The SSH seems to fail when this message shows up. If you do sh ssh session-info, do you see any stuck connections? Do you run any script which ssh into ACE periodically to collect data?

Regards,

Kanwal

Note: Please mark answers if they are helpful.
 

Cisco Employee

Hi,I see what you are saying.

Hi,

I see what you are saying. Thank you for the pcaps. This is definitely ACE misbehaving. Do you have show tech during the problem? Show logging?

I would like to see the logs during the issue. Did you try reloading the ACE at same version?

Regards,

Kanwal

Note: Please mark answers if they are helpful.

55
Views
0
Helpful
6
Replies
This widget could not be displayed.