SSH登陆ASA防火墙有key exchange faild错误提示

[wangfangjie]

当终端软件登陆ASA时候比如CRT登陆，有如下提示：

key exchange faild

No compatible key-exchange method . The server supports these methods : diffie-hellman

The diffie hellman key exchange method is off by default to address the logjam vulnerability . It can be turned on in the sessions options dialog in the  Connection / SSH2 category in order to connect to servers that only supportle -diffie-hellman

[YilinChen]

需要明确ASA的版本和CRT的软件版本，大概率还是CRT版本过低导致的，建议升级版本，也可以考虑用其它终端防真软件替代CRT，比如xshell。