It can be common for older devices to throw errors like the following when trying to ssh into them.<\/p>\n\n\n\n
Unable to negotiate with 192.168.1.1 port 22: no matching key exchange<\/strong> method found. Their offer: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1<\/strong><\/pre>\n\n\n\nor <\/p>\n\n\n\n
Unable to negotiate with 192.168.1.1 port 22: no matching host key<\/strong> type found. Their offer: ssh-rsa<\/strong><\/pre>\n\n\n\nThere can also be a <\/em>No Matching Cipher Found<\/a> error. We have talked about that in the past<\/em>.<\/p>\n\n\n\n
The issue is that your version of SSH does not support those older, and most likely insecure, Key Exchange and Host Key algorithms types. The errors do give us enough info to add the right options to connect to the device. <\/p>\n\n\n\n
No Matching Key Exchange Method Found<\/h2>\n\n\n\n
For the “no matching key exchange<\/strong> method found.” we need to manually add the KexAlgorithms option. KexAlgorithms means Key Exchange Algorithm.<\/p>\n\n\n\n
ssh -o KexAlgorithms=+diffie-hellman-group14-sha1<\/strong> username@192.168.1.1<\/pre>\n\n\n\nChange out “diffie-hellman-group14-sha1” for a supported Key Exchange algorithm.<\/p>\n\n\n\n
<\/p>\n\n\n\n
No Matching Host Key Type Found<\/h2>\n\n\n\n
This issue is with the Host Key algorithm type. We’ll use the -o option with the HostKeyAlgorithms option.<\/p>\n\n\n\n
ssh -o HostKeyAlgorithms=+ssh-rsa<\/strong> admin@192.168.1.1<\/pre>\n\n\n\nChange our ssh-rsa<\/strong> with a supported “Their offer:” Host Key.<\/p>\n\n\n\n
<\/p>\n\n\n\n
Putting it all together<\/h2>\n\n\n\n
You can combine the options if needed.<\/p>\n\n\n\n
ssh -o KexAlgorithms=+diffie-hellman-group14-sha1 -o HostKeyAlgorithms=+ssh-rsa admin@192.168.1.1<\/pre>\n\n\n\n<\/p>\n\n\n\n
We have covered some of these topics before. Be sure to check them out.<\/p>\n\n\n\n
no matching cipher found. Their offer: aes128-cbc,3des-cbc\u2026<\/a><\/p>\n\n\n\n
no matching key exchange method found. Their offer: diffie-hellman-group1-sha1<\/a><\/p>\n\n\n\n
no matching host key type found. Their offer: ssh-dss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
It can be common for older devices to throw errors like the following when trying to ssh into them. Unable to negotiate with 192.168.1.1 port 22: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 or Unable to negotiate with … Continue reading