I found this thread helpful, so I thought to add my experience.
In short, I have a dual band wifi router/DSL modem (Arris BGW210-700)
which seems to mess with some traffic moving between devices connected
at 2.4GHz (my SSH server) and 5GHz (my ssh client). I can avoid this by
forcing the use of
My $0.02. I don't disagree that this is an MTU problem on the path, and
that OpenSSH could be smarter about this, but my fix was to specify the
key exchange algo.
ssh -o KexAlgorithms=ecdh-sha2-nistp521 f...@bar.com
replacing the algorithm with one that the server says it supports.
Not
Update to my comment above (#37):
I was able to connect to Box2 from OS X 10.11. I tried once more by
mistake and was shocked that it suddenly worked (albeit with a long
connection lag). With more testing I found I could connect from 10.11 to
Box2 maybe 1/25 times (as I said, crazy making). I
I'm running into hung ssh connection and it is crazy making because I'm
getting inconsistent behavior across 16.10 boxes.
I've got two newly installed 16.10 boxes ($ ssh -V: OpenSSH_7.3p1
Ubuntu-1, OpenSSL 1.0.2g 1 Mar 2016). I'll call them Box1 and Box2.
They are in in adjacent ports on switch
There is a problem with 'OpenSSH' client not connecting while 'Putty'
client does work given the same network settings. This was my finding
almost 3 years ago.
Given that another client does work - there is something OpenSSH Client
can do to resolve the issue.
Ubuntu distributes OpenSSH client
Hi everybody,
this is coming up over and over again and not only on Ubuntu but on various
Distributions.
As outlined before the error is an effect of broken path MTU discovery.
This could be Firewall, broken Router software, ... , bad local MTU config, ...
many potential sources.
It is nothing
Looks like this is still on in 1:6.6p1-2ubuntu2.8 version of openssh-
client and server
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at
Just noticed this after the last dist-upgrade on Ubuntu 14.04 LTS,
installed packages are openssh-server 1:6.6p1-2ubuntu2.7 and openssh-
client 1:6.6p1-2ubuntu2.7.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
This solved the issue:
Append to /etc/sysctl.conf the following:
net.ipv4.tcp_mtu_probing = 1
after restart you should see at /proc/sys/net/ipv4/tcp_mtu_probing the
value "1"
A temporary solution is:
echo 1 > /proc/sys/net/ipv4/tcp_mtu_probing
caveat: this will be reset at boot.
You can try
Could recreate the scenario easily, and the following solved it:
sudo su
echo 2 > /proc/sys/net/ipv4/tcp_mtu_probing
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to
Lowering MTU 1200 worked for me.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
To manage
Might be your PMTU discovery is being blocked by a firewall somewhere.
http://mccltd.net/blog/?p=1577
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to
Might be your PMTU discovery is being blocked by a firewall somewhere.
http://mccltd.net/blog/?p=1577
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host
ubuntu 14.04 to cisco catalyst switches and debianboxes
out of nowhere (or maybe with some update from around a week ago) i could not
access my network anymore...
just to find out its my box fault... had to rdp into windows machines to ssh
into my linux/unix boxes..
--
ubuntu 14.04 to cisco catalyst switches and debianboxes
out of nowhere (or maybe with some update from around a week ago) i could not
access my network anymore...
just to find out its my box fault... had to rdp into windows machines to ssh
into my linux/unix boxes..
--
Had the same hang. Client is Ubuntu 15.10 and server is 14.04, both up
to date as of today. Fix was to change client MTU from 9000 to 1500.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Had the same hang. Client is Ubuntu 15.10 and server is 14.04, both up
to date as of today. Fix was to change client MTU from 9000 to 1500.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
Has there been any recent updates on this? I have a network setup with
tunnels between Cisco routers as the egress points for each remote site
and am having the same problems when attempting to SSH from a host
inside of one site to the other. Again, MTU related. I hope there is a
permanent fix
Has there been any recent updates on this? I have a network setup with
tunnels between Cisco routers as the egress points for each remote site
and am having the same problems when attempting to SSH from a host
inside of one site to the other. Again, MTU related. I hope there is a
permanent fix
Since the DF bit is set and PMTUD is being disobeyed, I discovered that
MSS is obeyed. Therefore, I resolved my problems by doing the overhead
math and setting the MSS adjust parameter on the LAN facing interfaces
of my routers. This workaround is definitely more scalable than
changing the
Since the DF bit is set and PMTUD is being disobeyed, I discovered that
MSS is obeyed. Therefore, I resolved my problems by doing the overhead
math and setting the MSS adjust parameter on the LAN facing interfaces
of my routers. This workaround is definitely more scalable than
changing the
Same issue when trying to connect from Arch ssh OpenSSH_6.9p1, OpenSSL
1.0.2d 9 Jul 2015, to Ubuntu 14.04.2 sshd.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh
Same issue when trying to connect from Arch ssh OpenSSH_6.9p1, OpenSSL
1.0.2d 9 Jul 2015, to Ubuntu 14.04.2 sshd.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect
MTU 1200 did it for me too! Thanks!
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
MTU 1200 did it for me too! Thanks!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
To manage
I had the same issue. No VPN tho, client is `OpenSSH_6.6.1p1 Ubuntu-
2ubuntu2, OpenSSL 1.0.1f 6 Jan 2014` and server is `OpenSSH_6.6.1p1
Ubuntu-2ubuntu2, OpenSSL 1.0.1f 6 Jan 2014` (yes, same). Of course scp
or rsync and anything using ssh connection using openssh was broken as
well.
Changing the
I had the same issue. No VPN tho, client is `OpenSSH_6.6.1p1 Ubuntu-
2ubuntu2, OpenSSL 1.0.1f 6 Jan 2014` and server is `OpenSSH_6.6.1p1
Ubuntu-2ubuntu2, OpenSSL 1.0.1f 6 Jan 2014` (yes, same). Of course scp
or rsync and anything using ssh connection using openssh was broken as
well.
Changing the
I've had the same issue on 14.04, using cisco vpn client (horrific) ,
connecting to a linux machine or freebsd machine, setting MTU to 1200
helped as well.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
I've had the same issue on 14.04, using cisco vpn client (horrific) ,
connecting to a linux machine or freebsd machine, setting MTU to 1200
helped as well.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Problem was reproduced with openSUSE as client (opened pptp VPN to work
network) and CentOS 6.6
It is not the Ubuntu bag:
https://forums.opensuse.org/showthread.php/459723-ssh-does-not-connect
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612607
Problem was reproduced with openSUSE as client (opened pptp VPN to work
network) and CentOS 6.6
It is not the Ubuntu bag:
https://forums.opensuse.org/showthread.php/459723-ssh-does-not-connect
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612607
Changing MTU does not solve the problem.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
To manage
Hello again, problem appeared on openSUSE 13.2 (x32) as client and Xubuntu
14.04.2 as a server.
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Seems like it is a server problem not a client.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
Hello again, problem appeared on openSUSE 13.2 (x32) as client and Xubuntu
14.04.2 as a server.
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Seems like it is a server problem not a client.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to
Changing MTU does not solve the problem.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
Hello,
Used NetworkManager VPN (CHAP and MSCHAPv2 options are checked).
Have the same problem on clear installed xubuntu 14.04.2.
It stops at the the line: debug1: expecting SSH2_MSG_KEX_ECDH_REPLY.
It is about 1 year and there is no any news or workaround.
--
You received this bug notification
Hello,
Used NetworkManager VPN (CHAP and MSCHAPv2 options are checked).
Have the same problem on clear installed xubuntu 14.04.2.
It stops at the the line: debug1: expecting SSH2_MSG_KEX_ECDH_REPLY.
It is about 1 year and there is no any news or workaround.
--
You received this bug notification
This affects me.
14.04 trying to connect through ssh to 12.04. Both 64bits.
It stops at the the line: debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Please help.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
This affects me.
14.04 trying to connect through ssh to 12.04. Both 64bits.
It stops at the the line: debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
Please help.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
I had this same problem today and we changed the MTU to 1500 on the
remote server we were trying to connect to and everything worked
straight afterwards. I was trying to do a simple git clone
user@domain:group/repo.git.
From the local server I was connecting from to do the clone it would
always
I had this same problem today and we changed the MTU to 1500 on the
remote server we were trying to connect to and everything worked
straight afterwards. I was trying to do a simple git clone
user@domain:group/repo.git.
From the local server I was connecting from to do the clone it would
always
it works when turning off DTLS
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
To
it works when turning off DTLS
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
To manage
besides setting MTU to 1480, it is wise to do:
# /sbin/iptables -I OUTPUT -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--clamp-mss-to-pmtu
# /sbin/ip6tables -I OUTPUT -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--clamp-mss-to-pmtu
because there still are firewalls out there that can't handle
besides setting MTU to 1480, it is wise to do:
# /sbin/iptables -I OUTPUT -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--clamp-mss-to-pmtu
# /sbin/ip6tables -I OUTPUT -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--clamp-mss-to-pmtu
because there still are firewalls out there that can't handle
Setting the MTU to 1480 did it. This MTU problem also affects navigation
to certains sites, e.g. facebook via https. Old Ubuntu 12.04-LTS did not
feature this bug.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
Setting the MTU to 1480 did it. This MTU problem also affects navigation
to certains sites, e.g. facebook via https. Old Ubuntu 12.04-LTS did not
feature this bug.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Same problem here. MTU of the server is 1500, changing client MTU to the
same value doesn't fix it.
Testing with ping, 1300 byte pings make it through fine, so tried
setting client MTU to that on both client and server. No dice.
Server version is OpenSSH_5.9p1 Debian-5ubuntu1.4, OpenSSL 1.0.1 14
Same problem here. MTU of the server is 1500, changing client MTU to the
same value doesn't fix it.
Testing with ping, 1300 byte pings make it through fine, so tried
setting client MTU to that on both client and server. No dice.
Server version is OpenSSH_5.9p1 Debian-5ubuntu1.4, OpenSSL 1.0.1 14
setting MTU to 1200 fixed my problem
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
setting MTU to 1200 fixed my problem
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
SSH2_MSG_KEX_ECDH_REPLY'
To manage
It's almost certanly MTU problem. Just try
ip li set mtu 1200 dev tap0 (or tun0)
to test
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN
It's almost certanly MTU problem. Just try
ip li set mtu 1200 dev tap0 (or tun0)
to test
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at
I have the exact same hang just trying to ssh into the host (remotely).
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at
The next time I removed the X forwarding ( ssh -X ) and it didn't hang
so X-forwarding (or the attempted access thereof) may play a role in
this bug.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
I have the exact same hang just trying to ssh into the host (remotely).
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
The next time I removed the X forwarding ( ssh -X ) and it didn't hang
so X-forwarding (or the attempted access thereof) may play a role in
this bug.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
FYI Specifying the cipher with onopenssh-client 1:6.2p2-6ubuntu as:
ssh -c 3des-cbc targethost
works for me.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh
FYI Specifying the cipher with onopenssh-client 1:6.2p2-6ubuntu as:
ssh -c 3des-cbc targethost
works for me.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect
I think this is this same bug 708493 re surging again...
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
I think this is this same bug 708493 re surging again...
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: openssh (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
Same issue, 13.10 openssh-client 6.2p2-6ubuntu0.1 cannot connect to
server 12.04.03 openssh-server 5.9p1-5ubuntu1.1.
Putty is working as stated above.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: openssh (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
Same issue, 13.10 openssh-client 6.2p2-6ubuntu0.1 cannot connect to
server 12.04.03 openssh-server 5.9p1-5ubuntu1.1.
Putty is working as stated above.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Changed in: openssh (Ubuntu)
Importance: Undecided = High
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
** Changed in: openssh (Ubuntu)
Importance: Undecided = High
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1254085
Title:
ssh fails to connect to VPN host - hangs at 'expecting
scp suffers the same issue, but interestingly, so seemingly does pscp
which hangs indefinitely after successfully connecting and starting to
send the data.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in Ubuntu.
scp suffers the same issue, but interestingly, so seemingly does pscp
which hangs indefinitely after successfully connecting and starting to
send the data.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
69 matches
Mail list logo
