My $0.02. I don't disagree that this is an MTU problem on the path, and that OpenSSH could be smarter about this, but my fix was to specify the key exchange algo.
ssh -o KexAlgorithms=ecdh-sha2-nistp521 f...@bar.com replacing the algorithm with one that the server says it supports. Not working: * MTU probing fix (#32) didn't work for me, net.ipv4.tcp_mtu_probing to 1 or 2. * Specification of the cipher (#6) as in ssh -c. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1254085 Title: ssh fails to connect to VPN host - hangs at 'expecting SSH2_MSG_KEX_ECDH_REPLY' To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1254085/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs