The router running in the network has a sudden increase in CPU usage and the following warning message appears:
Current FSM Is:ssh_main_versionmatch
%sep 03:49:37 2006 NE40-A-ZZ1 SSH/5/FSM_MOVE:FSM move from Ssh_main_versionma tch to Ssh_main_disconnect
%sep 03:49:37 2006 NE40-A-ZZ1 ssh/5/ver_major_err:protocol major versions dif fer:1 vs. 2%sep 03:49:37 2006 NE40 -A-ZZ1 ssh/5/err_dissconnect:the connection is closed by SSH Server
Current FSM Is:ssh_main_versionmatch
%sep 03:49:37 2006 NE40-A-ZZ1 SSH/5/FSM_MOVE:FSM move from Ssh_main_versionma tch to Ssh_main_disconnect
Step 1 Execute the command System-view and enter the system view.
Step 2 Execute the command user-interface[vty] first-ui-number [Last-ui-number], enter the Vty user interface view. Step 3 Execute the Command protocol inbound Telnet, configure the protocol supported by the user interface to Telnet. After the configuration is complete, the user interface supports protocols that accept only Telnet users and do not accept SSH users. As a result, the problem is resolved by no longer alerting and CPU usage decreasing.
This article from "Ma Guange-Blog" blog, reproduced please contact the author!
SSH attacks lead to a sudden increase in CPU utilization