SSH login on IPv6

Bugs
1

Configuration of SSH is made as below:
vyos@vyos# show service ssh | strip-private
dynamic-protection {
allow-from xxx.xxx.201.0/24
allow-from fd01::/112
}
listen-address xxx.xxx.201.250
listen-address fd01::f000
port 22

it was works but will not work on IPv6 after reboot.

system says:
ssh vyos@fd01::f000
ssh: connect to host fd01::f000 port 22: Connection refused.

But IPv4 can login.
Deleted allow-from fd01::/112 and commit, login from IPv6 works.
Then set allow-from fd01::/112 again and commit, login from IPv6 still works, even restart SSH.
But reboot vyos, the login SSH by IPv6 will not work anyway.

Could somebody can help to look into this finding.

the version is vyos 1.5-rolling-202412160007

Thanks.

2

try to delete these two lines, may fix this issue.

listen-address xxx.xxx.201.250
listen-address fd01::f000
3

I’ve tried to replicate the problem on VyOS 1.5-rolling-202412160007, but I wasn’t able to reproduce it in the lab. SSH over IPv6 worked fine even after a reboot.

It might be worth checking if there are any differences in your environment that could be causing this. Also, I’d recommend updating to the latest rolling release of VyOS to see if that resolves the issue—you can grab it here VyOS Community
If the issue is still happening after updating, you can share more details (like logs or your show interfaces output)

1 Like
4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.