01-24-2023 01:40 AM
Problem description: I have a Cisco Switch C4500X-16, which got rebooted about 2 weeks ago. After the reboot, the switch came back up and everything is working fine, to only thing is, I'm not able to access it remotely (via SSH directly to the switch). I have local user authentication and use SSH version 2 to access it remotely. However, if I access another switch that is connected to this one, and try to ssh -l, I'm able to access the switch. If I try to access it via SSH directly, it doesn't even give me a login prompt.
01-24-2023 01:45 AM
can you share the configurations related to VTY lines
01-24-2023 01:47 AM - edited 01-24-2023 01:50 AM
VTY
line vty 0 4
privilege level 15
transport input ssh
line vty 5 15
privilege level 15
!
Sh ip ssh
sh ip ssh
SSH Enabled - version 1.99
Authentication methods:publickey,keyboard-interactive,password
Authentication Publickey Algorithms:x509v3-ssh-rsa,ssh-rsa
Hostkey Algorithms:x509v3-ssh-rsa,ssh-rsa
Encryption Algorithms:aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr
MAC Algorithms:hmac-sha1,hmac-sha1-96
Authentication timeout: 120 secs; Authentication retries: 3
Minimum expected Diffie Hellman key size : 1024 bits
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAYQCZ6daLhzy7D3m49NHox7/esbIXL+sWuT1j0xUebTIq
sHRweX2AfoaOIcqzQi5K21WrK9tT/I5s/2imOgRMU3rAQbBuZBK+A55RCZ9UCEVFDmn2mySNzWEccgih
01-24-2023 02:06 AM
is your PC can ping to switch management IP? is switch accessible from PC? are you getting connection reset error or unable to connect error when doing SSH?
01-24-2023 02:20 AM
I'm not able to reach the switch management IP from my PC. Switch 2, however, is reachable and I can ping it from my PC. I'm using Putty, the error that I get is the following:
01-24-2023 01:46 AM
>... If I try to access it via SSH directly, it doesn't even give me a login prompt.
How far do you get then ? (and or post a screenshot (e.g.))
M.
01-24-2023 01:50 AM
@carlosrodriguez17 wrote:
if I access another switch that is connected to this one, and try to ssh -l, I'm able to access the switch.
ACL
01-24-2023 01:51 AM
what IP you use in PC ? what is IP of managment VLAN ?
I think that direct not work because the IP of PC is different subnet than the management VLAN IP.
when you access via other SW success because the SW1 management VLAN IP is in same subnet of SW2 management VLAN IP
01-24-2023 02:43 AM
There are a few things that could be causing the issue with not being able to access the Cisco switch remotely via SSH.
Alternatively, you can try these commands:
Check the switch's IP address:
show ip interface brief
Check the switch's SSH configuration:
show running-config | include ssh
Ensure that the switch's local user authentication is still configured correctly:
show running-config | include username
Check the switch's firewall settings:
show ip access-list
Check the switch's logs:
show logging
If you are still unable to access the switch, it may be worth trying to reset the switch to its factory defaults and reconfigure it:
erase startup-config
reload
Please note that these commands may slightly differ depending on the IOS version you are using on your switch.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide