New Cisco Default SSH Server Settings on Switches Breaks IR Orion Backup. new switches from Cisco are running v17.12.3 code are failing our scheduled/manual backups.

New Cisco Default SSH Server Settings on Switches Breaks IR Orion Backup.

new switches from Cisco are running v17.12.3 code are failing our scheduled/manual backups.

I did not change anything on the Orion side, and I have not looked to see if the Orion ssh client can be adjusted to login to the switch with tightened ssh server setup but I have attached a file showing what I change to get the switches to backup by lower the ssh server settings on the switch side.

This backup issue is going to probably going to continue as newer Cisco switches with the newer IOS version is rolled out and we have two options, lower the ssh server setting on the switches with the newer IOS versions or look and see if Orion can tighter ssh algorithms on its side. we'd prefer to tighten the orion side.

I'm hoping this request can get Solarwinds to help update the cipher suite so we can eliminate this issue.

Find more posts tagged with

cipher

Status: None

Comments

cxb2341

[View:/cfs-file/__key/commentfiles/fb5d84b10a5745448a7a45dafc1faa43-fc9e7b9a-7a45-4c30-80af-c54d3e36848b/Cisco-Switches-_2D00_-New-Default-SSH-Server-Setting-Breaks-Orion-Backups.txt:820:615]

stuartd

@cxb2341

This is not really a feature request as it sounds like you need to update the ssh ciphers.

If you are running an older than 2024.2.1 version of SW then the easiest answer is to upgrade. This post [ SSH - Connection Refused Cipher Updates - An F.Y.I. ] talks about solving this issue for Fortinet FWs running newer versions, but the principles apply to any newer OS. Essentially you have two choice...

1. Upgrade SW to version that does support the ciphers now in use and/or wait for them to include newer ciphers or

2. Downgrade your Cisco ssh ciphers to include older/weaker ones.