[rancid] As one door closes, another opens... ssh failing with (some) Cisco devices after OS upgrade?

[Nick Hilliard]

On 16/05/2015 22:31, Alex DEKKER wrote:
> On 16/05/15 11:08, Howard Jones wrote:
>>  Evidently those specific devices don't meet some minimum standard that
>> the openssh folks enforce.
>>
> There is an option you can pass to SSH ['-o
> KexAlgorithms=diffie-hellman-group14-sha1'] to allow it to connect to older
> versions of IOS. The error emitted by SSH isn't much help at all.

or on ios config:

ip ssh dh min size 4096

This doesn't work on all IOS images but if it works, it's a useful
workaround where upgrading is a problem.

Nick