After firmware upgrade, could not access other device via SSH in FGT CLI

[StevenT]

Hi,

Recently I upgraded FG401E firmware to 7.2.5.

But i tried to connect SSH via FGT CLI, it had this error.

FGT-FW1# exec ssh usercisco@192.168.0.234
Unable to negotiate with 192.168.0.234: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1

Anyone had this issue before?

[dbu · Accepted solution]

Hi @StevenT ,

It looks like the key exchange method is not matching between both sides. 
Please have a look on how to fix it : 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-No-matching-key-exchange-found/ta-p/273990

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSH-key-exchange-troubleshooting/ta-p/1943...

Regards!