nanog mailing list archives
ssh access to cisco and "unfriendlies"
From: Jim Mercer <jim () reptiles org>
Date: Wed, 22 Nov 2000 20:52:14 -0500
i've been trying to get ssh access to cisco IOS 12.1.2 working, but no matter what i do, the openssh client says "3des not supported by server". so, i fired up a local copy of win32 SecureCRT, and use just "des" encryption, and lo, and behold, it worked. so, i started poking around and discovered that likely what i need is a version of IOS with 3des support. as i understand it, in order to get a 3des IOS, you need to agree to: We will not supply network services (e.g., running a virtual private network) to, or for government organizations/enterprises other than those of, or in: Austria, Australia, Belgium, Canada, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Japan, Luxembourg, Netherlands, New Zealand, Norway, Poland, Portugal, Spain, Sweden, Switzerland, United Kingdom, United States without written authorization from Cisco Systems Inc. and/or the governments of the U.S., United Kingdom, and The Netherlands. now, considering some of my clients, i need to pay heed to this. in smaller countries, the first and only internet service is generally run by the PTT, which is usually a "government organization or enterprise". that being said, i find it extremely draconian that i can't run a 3des IOS on a router in Canada, if i supply network services in countries not on that list. so, when i go to set up a connection to Ghana, i am going to need Cisco's permission if i want 3des ssh enabled on the canadian router? and Brazil? and Mexico? -- [ Jim Mercer jim () reptiles org +1 416 410-5633 ] [ Reptilian Research -- Longer Life through Colder Blood ] [ Don't be fooled by cheap Finnish imitations; BSD is the One True Code. ]
Current thread:
- ssh access to cisco and "unfriendlies" Jim Mercer (Nov 22)
- Re: ssh access to cisco and "unfriendlies" jlewis (Nov 22)
- Re: ssh access to cisco and "unfriendlies" theo (Nov 23)
- Re: ssh access to cisco and "unfriendlies" Jim Mercer (Nov 23)
- Re: ssh access to cisco and "unfriendlies" theo (Nov 23)
- Re: ssh access to cisco and "unfriendlies" Jim Mercer (Nov 23)
- Re: ssh access to cisco and "unfriendlies" Stephen Sprunk (Nov 24)
- Re: ssh access to cisco and "unfriendlies" Jim Mercer (Nov 23)
- <Possible follow-ups>
- RE: ssh access to cisco and "unfriendlies" Sutantyo, Danny (Nov 28)
- Re: ssh access to cisco and "unfriendlies" theo (Nov 28)
- RE: ssh access to cisco and "unfriendlies" Luan M Nguyen (Nov 28)
- RE: ssh access to cisco and "unfriendlies" Sutantyo, Danny (Nov 28)