NCM gets connection refused from CISCO Nexus switch

I have two CISCO Nexus9000's that require aes256-gcm ssh encryption. In the NCM trace log i can see that it fails with "Connection Error : System.Expection: Could not negotiate encryption algorithm."

In my encryptionlist i see that is has aes256-gcm listed, but it looks like it doesn't have a comma separating it from another encryption method. below is a screen shot.

following this link https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-command-template-commands.htm#Commands i go to http://your_server/Orion/Admin/AdvancedConfiguration/Global.aspx and look at encryptionlist and it has a comma separating the two encryption methods.

is this a normal? or am i looking in the wrong place for this.

Find more posts tagged with

Accepted answers

samuel.tiffany

resolved the issue by copying the generic cisco nexus device template and added. <Command Name="EncryptionList" Value=ases256-gcm@openssh.com" >/ within the xml editor for the copied template.

All comments

samuel.tiffany

this is also what the switch reports when i try to download the running config from the switch

" no matching cipher found. Their offer: aes128-ctr,aes128-cb
c,aes128-gcm@openssh.com,aes192-ctr,aes192-cbc,aes192-gcm@openssh.com,aes256-ctr,aes256-cbcaes256-gcm@openssh.com [preauth] - dcos_sshd[21134]"

samuel.tiffany

resolved the issue by copying the generic cisco nexus device template and added. <Command Name="EncryptionList" Value=ases256-gcm@openssh.com" >/ within the xml editor for the copied template.