Need help moving existing ASW management IP to New Remote management IP/SSH

[jtsrunning]

Hi,

On a access switch, I tried moving the current management IP and VLAN 1000 to a new management IP and VLAN 30 using a different subnet. I initially SSH into the current device IP: 10.186.73.5/24. After,
I used the following script:

!
vlan 30
name Network_Management
!
interface vlan 30

description Network_Mgt.
ip address 10.22.42.4 255.255.255.0
!
ip default-gateway 10.22.42.1
!
Test connection here. New IP pingable throughout network and could SSH into it, but I am now denied access from my credentials. Changing the default-gateway denied my login credentials.
!
I consoled in and added back the original default-gateway 10.186.73.1. I SSH into the switch using the NEW IP 10.22.42.4 and it asked for my credentials. I was in successfully.

I don't understand why the default gateway affects my credentials being denied.

[Meheretab Mengistu]

Hi,

How do you authenticate when you do SSH? Is it using local username/password? Or, is it using TACACS+ or other servers?

HTH,
Meheretab

[jtsrunning]

SSH was authenticatred via TACACS+

[Meheretab Mengistu · Accepted solution]

Check if you could access the tacacs+ server from the new subnet (eg. ping TACACS_IP_ADDRESS source vlan30). Could you access the tacacs+ server?

Also, check whether you have configured "ip tacacs source-interface vlan 1000". If so, replace it with "ip tacacs source-interface vlan 30".

HTH,
Meheretab

[jtsrunning]

Thank you very much for the speedy response. Your solution helped and I also had to update the TACACS server.