can not ssh to switch2960

[q-le]

Hi,

I replaced an access switch 3750 with a switch 2960.

Basically I just copy the whole config of the 3750 to 2960.

The 3750 use AAA, Crypto pki trustpoint TP-self-signed and radius-server host etc.

Now I can only telnet to 2960 but not SSH to it.

Any advice on how to fix this issues

Thanks

Ql

[Leo Laohoo]

Now I can only telnet to 2960 but not SSH to it.

Maybe your IOS does not support crypto.

Please post the output to the command "sh version".

[q-le]

Hi

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------
*    1 28    WS-C2960S-24PS-L   12.2(55)SE2           C2960S-UNIVERSALK9-M

and I can do sh crypto pki certificated

below are part of my config:

Building configuration...

Current configuration : 10906 bytes
!
! No configuration change since last restart
!
version 12.2
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname LAS-WFC
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$IO36$i78VO00dfsG5E9K7dPlGm0
!
username manager secret 5 $1$GYgk$8amiiIjEht0r5S8pzK5FF.
username sohadmin privilege 15 password 7 06155F29445E
!
!
aaa new-model
!
!
aaa group server radius TESTRadius
server 172.18.100.113 auth-port 1812 acct-port 1813
server 172.19.100.114 auth-port 1812 acct-port 1813
!
aaa authentication login default group SOHRadius local
aaa authorization console
aaa authorization exec default group SOHRadius local
!
!
!
aaa session-id common
clock timezone AEST 10
clock summer-time AEST recurring 1 Sun Oct 2:00 1 Sun Apr 2:00
switch 1 provision ws-c2960s-24ps-l
!
!
udld enable

!
!
!
crypto pki trustpoint TP-self-signed-6434944
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-6434944
revocation-check none
rsakeypair TP-self-signed-6434944
!
!
crypto pki certificate chain TP-self-signed-6434944
certificate self-signed 01
  3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  2E312C30 2A060355 04031323 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 36343334 39343430 1E170D39 33303330 31303030 3035325A
  170D3230 30313031 30303030 30305A30 2E312C30 2A060355 04031323 494F532D
  53656C66 2D536967 6E65642D 43657274 69666963 6174652D 36343334 39343430
  819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100 A26F03BF
  9170C136 99C0CD60 DE6B03EB E44C016E A54DD572 34BBA0B3 36CE7F61 4E1D8EA5
  5B0E33FB 7C6C997E 26F825B1 611DAD40 FB3988C4 3A5DF8FC 360702B9 371C1406
  8253D46C 7D432A1C 0E6C584D 66EA35D2 2724A136 39A1C542 798A49B1 852B07B1
  547208D8 53CB28D5 3D3C992F CFAA80CA 131B0C77 6DF11073 B318B669 02030100
  01A36A30 68300F06 03551D13 0101FF04 05300301 01FF3015 0603551D 11040E30
  0C820A73 6F687766 63617331 2E301F06 03551D23 04183016 8014719F C24F7AC5
  A8DC7882 6B26171D DCD327E7 4FD1301D 0603551D 0E041604 14719FC2 4F7AC5A8
  DC78826B 26171DDC D327E74F D1300D06 092A8648 86F70D01 01040500 03818100
  7D8571A9 21B796E3 4D38D30C 5A9C6C07 71DF4556 4127D73E 8F994E43 83F3CAE9
  32F9083D 372E6397 EAECB600 1FA106B8 AB14CBE4 1C82E82B 709EAA34 81AEB268
  526A7E72 2A5F307F 2967DDBA 29E9CF4A 92434BE9 14B2C71D AD3C6D26 8656BA4E
  4B9B02B4 4E6D3E6A F82984C3 78401739 DE3FCE47 3DADF342 AC57CAA2 B8318A32
  quit
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
!
!
errdisable recovery cause bpduguard
errdisable recovery cause psecure-violation

[q-le]

Hi Leolaohoo,

just enable ip http secure-server and it works now.

ie it was "no ip http secure-server"

Can you direct me to a good link where I can read up on this as I am not quite understand the whole process.

Thanks very much for your help.

Ql