Unable to connect to ICS(formerly Pulse Connect Secure VPN) using Netconf Perl Client

[darumuga]

I used to use Netconf Perl Client to connect to ICS(formerly Pulse Connect Secure VPN) using Netconf Perl Client.

Earlier, we were using OpenSSH 5.x. It was working fine.

In the latest releases, we are upgrading to SSH-2.0-OpenSSH_8.9. After this upgrade, I am no longer able to connect to ICS using Netconf Perl Client.

I tried using Net::OpenSSH and it seems to connect fine.

Raising this ticket to ask if it would be possible to use Net::OpenSSH instead of Net::SSH2.

[darumuga]

Here is the TCP stream for the non-working case:
SSH-2.0-libssh2_1.10.0
SSH-2.0-OpenSSH_8.9
...|..3g.L...S
A..y..F... curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,[email protected],diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256....rsa-sha2-512,rsa-sha2-256... aes128-ctr,aes192-ctr,aes256-ctr... aes128-ctr,aes192-ctr,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha2-512,hmac-sha1....none,[email protected]....none,[email protected].......................,..F].71.. h.N.V..v....ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1....ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email protected],[email protected],[email protected],ssh-rsa,ssh-dss....aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,[email protected],aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc....aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,[email protected],aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc...qhmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,[email protected]...qhmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,[email protected]....none....none..............v.<...i

[darumuga]

ive-20230110-002815_dmi_non_working_case_thru_script.zip

Use ip.host == 10.209.117.175 as filter in wireshark.
10.209.117.175 is the DMI client
10.209.125.162 is the ICS(formerly PCS)