The following sample output from the show ip ssh command displays the version of SSH that is enabled, the authentication timeout values, and the number of authentication retries for a Version 1 connection with no Version 2 connection: ------------------------------------------------------------------------ Device# show ip ssh 3d06h: %SYS-5-CONFIG_I: Configured from console by console SSH Enabled - version 1.5 Authentication timeout: 120 secs; Authentication retries:
3 ------------------------------------------------------------------------ Monitoring and Maintaining Secure Shell Version 2 Procedure Example The following sample output from the debug ip ssh command shows the connection is an SSH Version 2 connection: Device# debug ip ssh 00:33:55: SSH1: starting SSH control process 00:33:55: SSH1: sent protocol version id SSH-1.99-Cisco-1.25 00:33:55: SSH1: protocol version id is - SSH-2.0-OpenSSH_2.5.2p2 00:33:55: SSH2 1: send: len 280 (includes padlen 4) 00:33:55: SSH2 1: SSH2_MSG_KEXINIT sent 00:33:55: SSH2 1: ssh_receive: 536 bytes received 00:33:55: SSH2 1: input: packet len 632 00:33:55: SSH2 1: partial packet 8, need 624, maclen 0 00:33:55: SSH2 1:
ssh_receive: 96 bytes received 00:33:55: SSH2 1: partial packet 8, need 624, maclen 0 00:33:55: SSH2 1: input: padlen 11 00:33:55: SSH2 1: received packet type 20 00:33:55: SSH2 1: SSH2_MSG_KEXINIT received 00:33:55: SSH2: kex: client->server aes128-cbc hmac-md5 none 00:33:55: SSH2: kex: server->client aes128-cbc hmac-md5 none 00:33:55: SSH2 1: expecting SSH2_MSG_KEXDH_INIT Secure Shell Version 2 Support Monitoring and Maintaining Secure Shell Version 2 Command or Action Purpose Step 1 enable Example: Device> enable Enables privileged EXEC mode. Enter your password, if prompted. Step 2 debug ip ssh Example: Device# debug ip ssh Enables debugging of SSH. Step 3 debug snmp packet Example:
Device# debug snmp packet Enables debugging of every SNMP packet sent or received by the device. Secure Shell Version 2 Support 14