Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Can't download Node's configuration from Solarwinds

Hello guys,

I currently face the issue can't donwload the switch configuratio from solarwinds. And here is the error message when I click downlaod running config " Connection Refused by Ip: x.x.x.x. and when I look at the logs on the switch, it's show the error like bellow:

Dec 9 14:48:51: %SSH-3-NO_MATCH: No matching mac found: client hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96 server hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
Dec 9 14:48:51: %SSH-5-SSH2_SESSION: SSH2 Session request from x.x.x.x (tty = 1) using crypto cipher '', hmac '' Failed
Dec 9 14:48:51: %SSH-5-SSH2_CLOSE: SSH2 Session from x.x.x.x (tty = 1) for user '' using crypto cipher '', hmac '' closed

what is the solution to fix this issue?

Find more posts tagged with

Accepted answers

All comments

vinay.by

This probably could be related to encryption method (Encryption algorithms) used on the switch. The switch needs to be configured with one of the encryption algorithms that SolarWinds can use to download configuration.

I did see this in the past in one of my instances where I had SolarWinds NCM, let me share the KB link here - Hope this helps.

Supported algorithms and ciphers for SSH communications by NPM, NCM, and Hybrid Cloud Observability

vinay.by

If your issue is similar to mine, then the configuration on the switch needs to be corrected/changed accordingly.

Manon

Hi!

Thank for you replied, as I checked on the switch here is the MAC Algorithms:hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com on my switch. and my Solarwinds Orion Platform version is 2019.4. how can youi guid me what do I need to upgrade Solarwinds or change algorithm on switch?

vinay.by

Login onto the switch and get the details of ssh deployed - probably 'sh ssh' command should give you the details that you are looking for. The output will contain fields like the one mentioned below:

Connection-Version-Mode-Encryption-Hmac-State

Check the encryption details (output)

Refer to Supported algorithms and ciphers for SSH communications by NPM, NCM, and Hybrid Cloud Observability

Check if the encryption method on switch is mentioned in the below details that I have pasted, i don't see 2019.4 on link but i do see 2020.2.6 so more or less it would be the same. Hope this helps. If Encryption on switch is different from what you see below then that is not supported by SolarWinds. You will have to probably get the encryption on the switch down to aes* that is supported by both Switch and SolarWinds, hence modification might be required on the switch to support this.

Manon

Here is the out put of sh ssh on switch:

For document link you provided, I don't see version 2019 of Solarwinds platform. Basd on the out put above, Does it support with solarwinds version 2019 or not?

if I don't want to modify MAC Algorithms:hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com on switch, can I can upgrade MAC algorithm on Solarwinds?