01-20-2025 09:58 PM
Hi <
Access Switch and Core switch configuration template is same except IP route configuration and both switches are in same vlan. we are able to access ssh to access switch from wifi user(different vlan) but core switch we cannot access and core switch we can access from access switch via ssh -l username.
no aaa new-model
line vty 0 4
login local
transport input ssh
transport output ssh
line vty 5 15
login local
transport input ssh
transport output ssh
line vty 16 31
login
transport input ssh
!
01-20-2025 10:51 PM
Hello @ajesh-mp
When devices are in different VLANs, routing is essential for inter-VLAN communication. If the core switch does not have the correct routing configuration to reach the Wi-Fi user's VLAN, SSH traffic will not return successfully. To verify, check the core switch's routing table with the show ip route command. Ensure it has a route to the Wi-Fi VLAN or a default route configured. For example, you can set a default gateway:
ip default-gateway <router-ip>
This allows the core switch to forward traffic to unknown destinations to the router for proper routing.
01-21-2025 12:36 AM
transport output ssh <<- add this under vty 16 31.
MHM
01-21-2025 02:14 AM
Do you have username created on the switch?
change the command "no aaa new-model" to "aaa new-model"
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide