# Ssh connexion failure **URL:** \ **Category:** Uncategorized\ **Created:** [May 23, 2025, 1:30pm UTC](https://openziti.discourse.group/t/ssh-connexion-failure/4614 "2025-05-23T13:30:18Z")\ **Posts on this page:** 1\ **Showing post:** 5
**Author:** ![scareything](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/scareything/32/106_2.png) [@scareything](https://openziti.discourse.group/u/scareything)\ **Post date:** [May 23, 2025, 6:23pm UTC](https://openziti.discourse.group/t/ssh-connexion-failure/4614/5 "2025-05-23T18:23:26Z")
Hi, I noticed your config specifies a listening identity of "ssh\_server". Make sure this lines up with the value you're specifying as the dial identity (e.g. in your intercept.v1 dial options if you're using a tunneler on the client side). Most of the [dial-by-identity examples](https://openziti.discourse.group/t/single-identity-for-many-services/2809/2) you'll see here use variables in the service configurations and the identities are named to exactly match the intercept IP or hostname that targets the identity. This makes it possible to target multiple hosts with a single service. You could hard-code both the dial identity and the listen identity (maybe this is what you've done), but then you'd need to create a service for each host that you want to reach. In this case you actually wouldn't need to specify dial or listen options at all... If you do specify dial options or listen options, you need to make sure that the dialing and listening sides agree on what the identity name will be. --- _[View the full topic](https://openziti.discourse.group/t/ssh-connexion-failure/4614)._