https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/239969#M46547 <P>Yeah I know this is a pretty old thread, but FYI, on the SMB 700/1400 product line, you might want to use dbclient, the dropbear SSH client, instead of ssh/openssh.</P> Wed, 29 Jan 2025 13:31:48 GMT nmelay2 2025-01-29T13:31:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110663#M15214 <P>is it possible to connect to my switch using ssh from the checkpoint cli ?</P><P>&nbsp;</P><P>Here is the message i got .</P><P>no matching cipher found: client aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se server aes128-ctr,aes192-ctr,aes256-ctr</P><P>&nbsp;</P> Fri, 12 Feb 2021 16:40:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110663#M15214 nflnetwork29 2021-02-12T16:40:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110665#M15215 <P>It means the SSH client on the gateway doesn’t support the same ciphers the SSH server is configured to use.<BR />What kind of gateway are you SSHing from and what software version?</P> Fri, 12 Feb 2021 16:48:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110665#M15215 PhoneBoy 2021-02-12T16:48:28Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110670#M15216 <P>SMB 1450 R77.20.15</P><P>I guess another limitation of the SMB model line?</P> Fri, 12 Feb 2021 18:20:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110670#M15216 nflnetwork29 2021-02-12T18:20:06Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110672#M15217 <P>Phoneboy's response is 100% correct actually. Definitely means it would not support same ciphers...I had seen this before.</P> Fri, 12 Feb 2021 18:34:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110672#M15217 the_rock 2021-02-12T18:34:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110681#M15218 <P>The version string on our SSH client on SMB says:&nbsp;<SPAN class="s1">SSHield_2.1.0 derived from OpenSSH_3.5p1, SSH protocols 1.5/2.0, which I believe is used on VXworks systems.<BR />I checked on both R77.20.x and R80.20.x systems, same version string.<BR /></SPAN><SPAN class="s1">OpenSSH 3.5 is pretty old and doesn't support more modern ciphers.<BR />Even our regular gateways, until recently, were using a fairly old version of OpenSSH.<BR />We updated that (along with the Linux kernel) in R80.40.<BR /></SPAN></P> <P><SPAN class="s1">Getting this client updated on SMB would be an RFE.<BR />Meanwhile, you will have to reconfigure your SSH server to support at least one cipher in common with the client.</SPAN></P> Fri, 12 Feb 2021 20:07:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/110681#M15218 PhoneBoy 2021-02-12T20:07:38Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/239969#M46547 <P>Yeah I know this is a pretty old thread, but FYI, on the SMB 700/1400 product line, you might want to use dbclient, the dropbear SSH client, instead of ssh/openssh.</P> Wed, 29 Jan 2025 13:31:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/239969#M46547 nmelay2 2025-01-29T13:31:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/240014#M46558 <P>Turns out dbclient will also work when connecting to a 700/1400 series appliance from a different host when SSH won't work because of the cipher configuration.<BR />Great tip!</P> Wed, 29 Jan 2025 21:45:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-it-possible-to-connect-to-my-switch-using-ssh-from-the/m-p/240014#M46558 PhoneBoy 2025-01-29T21:45:09Z