Arch Linux

Hacksign

Member

Registered: 2012-07-30

Posts: 133

[SOLVED] can not ssh to server via VPN.

I'm using VPN to access my company's network at home.
But there seems to be some errors after I upgrade my system.

I can connect to company's VPN network with Cisco Anyconnect.
I can open company's LAN website ,which use https connection, with command line tool links/curl and even wine's iexplorer.exe.
But I can not open same website with firefox,below is firefox's error page conent:

Secure Connection Failed

The connection to the server was reset while the page was loading.

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

one more thing:
not all website cannot be opened, my company's intranet form can be accessed via firefox.

I can not ssh to any of company servers.Below is a ssh log:

hacksign@XSign [21:45:41] : ~                                                                                                                                                     
>> ssh fa01v -v
OpenSSH_6.9p1, OpenSSL 1.0.2d 9 Jul 2015
debug1: Reading configuration data /home/hacksign/.ssh/config
debug1: /home/hacksign/.ssh/config line 1: Applying options for *
debug1: /home/hacksign/.ssh/config line 86: Applying options for fa01v
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to fa01v.xxx.net [x.x.x.x] port 22.
debug1: Connection established.
debug1: key_load_public: No such file or directory
debug1: identity file /home/hacksign/.ssh/company.work.rsa type -1
debug1: key_load_public: No such file or directory
debug1: identity file /home/hacksign/.ssh/company.work.rsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
debug1: Authenticating to fa01v.xxxx.net:22 as 'username'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr umac-64@openssh.com none
debug1: kex: client->server aes128-ctr umac-64@openssh.com none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<3072<8192) sent

Then it is stucked on 'debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<3072<8192) sent' ....

All things are perfectly normal if I connect without VPN, I mean when I in company, connect to network with wired ethernet card  in company .....

I'm very confused about this situation .....
Any one help me out of the problem ?

Last edited by Hacksign (2015-08-27 02:25:53)

Hacksign

Member

Registered: 2012-07-30

Posts: 133

Re: [SOLVED] can not ssh to server via VPN.

update:
Same network with different version of packages & kernel.(my old laptop)
old laptop could work perfectly.
but new laptop could not.

very strange .....

luciano_cardoso

Member

From: Londrina/Paraná - Brasil

Registered: 2015-08-25

Posts: 1

Re: [SOLVED] can not ssh to server via VPN.

Hi,
found solution at http://serverfault.com/questions/657779 … some-sites...
just enable the following line at /etc/ssh/ssh_config:

MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160

I was stucked in same message "debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<8192<8192) sent", after uncomment MACs it worked (OpenSSH_7.1p1)....

Bye....

Hacksign

Member

Registered: 2012-07-30

Posts: 133

Re: [SOLVED] can not ssh to server via VPN.

Thanks, that's solved my problem~

Hi,
found solution at http://serverfault.com/questions/657779 … some-sites...
just enable the following line at /etc/ssh/ssh_config:

MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160

I was stucked in same message "debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<8192<8192) sent", after uncomment MACs it worked (OpenSSH_7.1p1)....

Bye....