Hi Kevin,

Good to hear that it works for you. I believe you know that you can always upgrade your ASA license to 3DES/AES for free. Here's the link for reference: https://tools.cisco.com/SWIFT/LicensingUI/ipsCryptoPage

Regards,
Piotr


On 2/24/13 9:20 PM, Kevin Sheahan wrote:
Yes Piotr this works just fine. I was originally trying to specify DES but it didn't work because Version 1 needs to be specified in order for DES to be an option.. 3DES is "lowest" you can go without specifying Version 1.
Thanks for the insight everyone.
Good Studies,
Kevin Sheahan


On Sun, Feb 24, 2013 at 9:27 AM, Fawad Khan <[email protected] <mailto:[email protected]>> wrote:

    I think the ciphers are not matching on both side. The debug says
    client has this 1.5 version ( which is ssh version 1 )whereas
    server is listening on des only. You need to use lower encryption
    as Piotr pointed it out.


    On Saturday, February 23, 2013, Piotr Matusiak wrote:

        Hi Kevin,

        What if you specify DES on the client:

        ssh -v 1 -c des -l pix 10.1.101.10

        ???

        Regards,
        Piotr


        On 2/23/13 1:03 AM, Kevin Sheahan wrote:
        Yo,
        I'm going through the new Micronics workbook and I've run
        into a weird issue. Never seen this before and wondering if
        you could help shed some light on the issue.
        I'm attempting to SSH to the ASA and I receive "[Connection
        to 10.1.101.10 aborted: error status 33]" error on the router
        I'm SSH'ing from. The only thing different about my setup is
        that I have an ASA 5510 without the VPN-3DES-AES license so
        SSHv1 is my only option. I'm specifying my SSH
        source-interface on the router that I'm coming from with "ip
        ssh source-interface Loopback0", though I still get the error
        without specifying source-interface. Also, I still get the
        same error even when I specify SSHv1 as follows "ssh -v 1 -l
        pix 10.1.101.10". Additional information including debugs are
        attached.
        Anyone ever seen this error and could shed some light on the
        cause?
        This is NOT an issue with the workbook, which is very good..
        I already went through it and took notes on the whole thing
        before labbing anything up and Piotr and Narbik went to great
        lengths to make a quality workbook for your studies.
        Kind Regards,
        Kevin Sheahan


        _______________________________________________
        For more information regarding industry leading CCIE Lab training, please 
visitwww.ipexpert.com  <http://www.ipexpert.com>

        Are you a CCNP or CCIE and looking for a job? Check 
outwww.PlatinumPlacement.com  <http://www.PlatinumPlacement.com>



-- FNK



_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to