reset cisco 5505 asa ssh connect anywhere

I mocked this up following that guide on an ASA 5505 running version 9.1.7(32) and it worked great. Make sure your terminal client software is set to use SSH key as the primary/only method of authentication and it should do so. We no longer have service agreements with Cisco and I would not reestablish them solely to fix this nagging issue.īasically follow this guide and it should work. various ASA keypair lengths (up to 2048).disabling aaa - I still get prompted for a password only, of course, it no longer works.using 'nopassword' - still get prompted for a password (which is '').But I can find no means of defining user authentication methods. It should not be using aaa, I would think. The user authen method is 'use AAA', aaa server group ID = 1 looks wrong to me. SSH2 0: requested tty: xterm-256color, height 26, width 140 SSH2 0: authentication successful for scp SSH(scp): user authen method is 'use AAA', aaa server group ID = 1 SSH2 0: SSH2_MSG_NEWKEYS receivedSSH(scp): user authen method is 'use AAA', aaa server group ID = 1 SSH2: kex: server->client aes128-ctr hmac-sha1 none SSH2: kex: client->server aes128-ctr hmac-sha1 none SSH0: client version is - SSH-2.0-OpenSSH_8.9p1 Ubuntu-3Ĭlient version string:SSH-2.0-OpenSSH_8.9p1 Ubuntu-3 SSH0: Exchanging versions - SSH-2.0-Cisco-1.25 If I enable debugging for ssh and log in: Device ssh opened successfully. O8DOmAQ8oJWGesadx2Kq4mzEYJ7XrW8lgNTJCe+yJ6MMos6XGVFRqyaaheHUEQ= Username scp password OpenSezzaMe privilege 15ĪAAAB3NzaC1yc2EAAAADAQABAAAAgQDJf/+4DKo2g64611G5iyK5Qh24ytbCqOlAKlrDp7ĪwxpVcrtBUCKu131Sj7B9RCV6QG9Jg4lOGx53zfBxRcE1cJ0p2n26nHwfIRHIhEeS4B8J1 Typical configuration for a 5505: ssh scopy enable Our ASA5505s are running ASA 9.2(4) and ASA5506s are running ASA 9.8(2).

So the issue appears to be with OpenSSH_8.9p1.

Despite my best research and efforts, I still get challenged for a password.Īfter input from FrameHowitzer, I tried connecting using Putty and that worked fine. I have been unsuccessful at getting public key authentication to work per Cisco Systems on any of our ASA5505 or ASA5506 routers.

Reset cisco 5505 asa ssh connect anywhere