Updated to ROS 7.10 now can't login via ssh

RouterOS General
1

Had a strange issue with my RB5009. I updated it from 7.4 to 7.10 a couple weeks ago, and out of the blue now it give this error when I attempt to login via ssh:

kex_exchange_identification: Connection closed by remote host

I can get in fine with winbox using the MAC address, but no ssh. I do have a rule blocking ssh,winbox and port 80 from the WAN interface (ether1) but that shouldn’t be blocking me from the internal LAN. When I try from webfig I get: “ERR_CONNECTION_RESET”.

Has anyone run into this? I can share the config if needed, but it has worked fine for about 2 years with no issues on 7.4. I did let it update to 7.11 this morning with no change. I have rebooted it twice hoping it was just some glitch with the updates.

Thanks!

2

Can you login with Winbox on IP?
Anything relevant in the logging?

3

No, only by MAC address. I have RoMON enabled.

Nothing in the log either. Also winbox will boot me out randomly every few minutes, then reconnects.

4

The an export might be helpful:

/export file=anynameyoulike

Remove serial and any other private information (like public IP address).

5

Ah ha!

Ok turns out I forgot to add a subnet to the ip/services for ssh and it was locking out all ssh connections from my office nodes.

Entry that remedied my issue:

set ssh address=192.168.0.0/24,192.168.1.0/24,192.168.2.0/24
6

In summary my issue wasn’t out of the blue it turns out, apparently I have never tried connecting from the “user” network from the office here, I normally go in from the management vlan or the trusted vlan, and this time it bit me! All good now! and yes, I’m an idiot!! lol

Thank you erlinden for the fast reply, much appreciated!

7

No problem, bit of advice:

Order your firewall rules (especially when shared your Mikrotik friends on the forum), that (appart from the missing rule below) will make it more readable and maintainable.

/ip firewall filter
add action=accept chain=input comment="Accept established,related, untracked" connection-state=established,related,untracked