SSH

 

configuration on server side

on the /etc/ssh/sshd_config

• AllowGroups   wheel
• PasswordAuthentication no
• AuthenticationMethods publickey
• PermitRootLogin no

access server

put public key into server side ~/.ssh/authorized_keys and then use private key on your computer to access remote server.

SSH2_MSG_KEX_ECDH_REPLY

if encounter "SSH2_MSG_KEX_ECDH_REPLY" issue, try 

• KexAlgorithms
• ssh -oKexAlgorithms=ecdh-sha2-nistp521 server
• KexAlgorithms ecdh-sha2-nistp521 in ~/.ssh/config
• see link for detail and Key Exchange Method for background
• MTU
• see link for background
• ip link set mtu 1200