JuniperSRXからリモートホストへのSSH接続時でWarningが出た場合の対処例

みなさんお疲れさまです～
本題の実習に入る前にSSH接続時にWarningがでましたので(;^_^A
復旧含めてブログに載せたいと思います～

SRXからSSHでリモートにアクセスしたところ以下のようなWarningが発生して
アクセスできません。。( ﾉД`)ｼｸｼｸ…

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
0e:31:cd:41:67:5f:e9:bd:36:be:59:53:03:6a:a7:29.
Please contact your system administrator.
Add correct host key in /var/home/admin/.ssh/known_hosts to get rid of this message.
Offending RSA key in /var/home/admin/.ssh/known_hosts:15
RSA host key for 172.16.5.1 has changed and you have requested strict checking.
Host key verification failed.

ググったところJuniperさんのナレッジベースを発見～♬

Juniperのknowledge Base
[SRX] SSH (secure shell) does not work from SRX and gives warning.

supportportal.juniper.net

一部を紹介します！

Somehow a remote device has changed its RSA key value or the RSA key changed or got deleted on the client for SSH.
However, the SRX device still has the old RSA key fingerprint value for the remote host in its database at /cf/root/.ssh/known_hosts .
When a user tries to do SSH to SRX, he gets an RSA finger print mismatch message.
This issue can be resolved by deleting the old RSA finger print value for that known host from the SRX database.