After firmware upgrade, could not access other device via SSH in FGT CLI

Forum|Forum|2 years ago
October 2, 2023
1 reply
2848 views

Hi,

Recently I upgraded FG401E firmware to 7.2.5.

But i tried to connect SSH via FGT CLI, it had this error.

FGT-FW1# exec ssh usercisco@192.168.0.234
Unable to negotiate with 192.168.0.234: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1

Anyone had this issue before?

FortiGate

Best answer by dbu

Hi @StevenT ,

It looks like the key exchange method is not matching between both sides.
Please have a look on how to fix it :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-No-matching-key-exchange-found/ta-p/273990

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSH-key-exchange-troubleshooting/ta-p/194388

Regards!

dbuAnswer

Staff

Hi @StevenT ,

It looks like the key exchange method is not matching between both sides.
Please have a look on how to fix it :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-No-matching-key-exchange-found/ta-p/273990

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSH-key-exchange-troubleshooting/ta-p/194388

Regards!

Sign up

Login with SSO

Login to the community

Login with SSO