Juniper Switch SSH 'Expecting SSH2_MSG_KEX_ECDH_REPLY' Error

I was trying to SSH into a Juniper switch running JunOS 12.3, the connection would fail with Connection closed by <switch IP>. Using ssh -vvv showed an error: Debug: debug1: expecting SSH2_MSG_KEX_ECDH_REPLY. This is a nice rabbit hole to go down as we’re going to use SSH’s verbose mode, nmap to debug the solution.

[Read More]

PfSense AX88179 vs RTL8153 USB 3 Ethernet Compatibility

Trying to add another interface to a pfSense box but because it has run out of ports, I had to resort to using a USB 3 Ethernet dongle. Assuming (wrongly) that since it is based on the AX88179 chip and being somewhat older that it would be supported better. That wasn’t the case.

[Read More]

Ubiquiti AP Proxy ARP Disruption

A client was having issues with a real time video or voice streaming dropping out for a few seconds every 20 minutes - only via WiFi using a Ubiquiti AP-AC-LR access point.

[Read More]

Cisco SG300 Port Security and Static Mac Filtering

I’ve got a device attached to a Cisco SG300 switch that I don’t trust which is on a separate VLAN. As an exercise, using DAI(Dynamic ARP Inspection) is the preferred solution but I want to manually statically assign the IP and MAC to the port instead.

[Read More]