<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Greetings,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am trying to get RANCID to use a different cyphertype. I have the following in my .cloginrc file:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>add method alteon*.altn.int {ssh}<o:p></o:p></p><p class=MsoNormal>add cyphertype alteon*.altn.int {aes256-ctr}<o:p></o:p></p><p class=MsoNormal>add user alteon*.altn.int {user}<o:p></o:p></p><p class=MsoNormal>add password alteon*.altn.int {*******}<o:p></o:p></p><p class=MsoNormal>add autoenable alteon*.altn.int 1<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am trying to access Alteon devices using the alogin script. As far as I know I should be able to add the cyphertype directive in the cloginrc file and have the spawned SSH session use the specified cipher when connecting. With the above add cyphertype line in the file, I get the following when running the alogin script:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>$ /usr/local/libexec/rancid/alogin alteon-a.colo.altn.int<o:p></o:p></p><p class=MsoNormal>alteon-a.colo.altn.int<o:p></o:p></p><p class=MsoNormal>spawn ssh -c 3des -x -l user alteon-a.colo.altn.int<o:p></o:p></p><p class=MsoNormal>no matching cipher found: client 3des-cbc server aes256-ctr,aes192-ctr,aes128-ctr,arcfour<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Error: Couldn't login<o:p></o:p></p><p class=MsoNormal>$<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>It looks to me like alogin is ignoring the cyphertype line and using 3des for the connection. In a recent software update, it seems Radware removed 3des ciphers by default for Alteon devices so the connection fails. AFAIK all I need to do to specify ciphers for the connection is add it to the .cloginrc file. Is there anything else that needs to be done here? Incidentally, that same behavior occurs when running the clogin script. The cyphertype value just seems to be ignored. Does my .cloginrc config look reasonable?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Version information:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>$ pkg version | grep rancid<o:p></o:p></p><p class=MsoNormal>rancid-2.3.8_6 =<o:p></o:p></p><p class=MsoNormal>$ pkg version | grep expect<o:p></o:p></p><p class=MsoNormal>expect-5.45.3 =<o:p></o:p></p><p class=MsoNormal>$ uname -a<o:p></o:p></p><p class=MsoNormal>FreeBSD netmon.altn.int 9.3-RELEASE-p43 FreeBSD 9.3-RELEASE-p43 #0: Sat May 28 00:19:32 UTC 2016 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I saw some information regarding configuring the SSH Daemon to support certain ciphers, but I am not sure it relevant to issuing connections to other servers. I don’t have any added ciphers in my ssh config file but am told the default set should support connections like the one above.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Any help here would be appreciated. I am not sure what else to look for. Thanks in advance.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Bob<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><span style='font-size:12.0pt'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt'>Robert Franzke<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:9.0pt;color:gray'>Network Administrator<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:9.0pt;color:gray'>Alt-N Technologies, Ltd. | Grapevine, TX<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:9.0pt;color:gray'>Office 817.601.3222 x234 | Mobile 972.746.5470<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:9.0pt;color:gray'><a href="http://www.altn.com"><span style='color:blue'>http://www.altn.com</span></a><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:9.0pt;color:gray'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:8.0pt;color:gray'>Sent using Alt-N's own <a href="http://www.altn.com/Products/MDaemon-Email-Server-Windows/"><span style='color:blue'>MDaemon Messaging Server</span></a></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:8.0pt;color:gray'>Now available with BYOD Mobile Device Management,</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:8.0pt;color:gray'>Document Sharing, Hijacked Account Detection and more.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'> <o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:8.0pt;color:gray'>Get to know the Alt-N family by liking us on <a href="http://www.facebook.com/AltN.MDaemon"><span style='color:blue'>Facebook</span></a>!</span><o:p></o:p></p></div></body></html>