cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
771
Views
10
Helpful
6
Replies

SSH not connecting

pablo.arcelcr
Level 1
Level 1

I have the following loopback interface in one of my equipments:

interface Loopback0
ip address 10.107.255.5 255.255.255.255

Also I have this in the equipment:

access-list 22 remark ****** VTY Access ACL ******
access-list 22 permit 10.107.34.72
access-list 22 permit 10.64.32.12
access-list 22 permit 10.154.5.21
access-list 22 permit 10.64.169.125
access-list 22 permit 10.195.32.35
access-list 22 permit 10.195.32.25
access-list 22 permit 10.195.32.24
access-list 22 permit 10.124.127.0 0.0.0.31
access-list 22 permit 10.195.127.0 0.0.0.31
access-list 22 permit 10.199.127.0 0.0.0.31
access-list 22 permit 10.68.127.0 0.0.0.31
access-list 22 deny any log

I made a traceroute from the machine I need access:

C:\Users\Administrator>tracert -d 10.107.255.5

Tracing route to 10.107.255.5 over a maximum of 30 h

1 <1 ms <1 ms <1 ms 10.154.5.1
2 2 ms 1 ms 1 ms 10.107.255.5

Trace complete.

But when I try connecting by ssh it shows a connection refused message

Thanks,

1 Accepted Solution

Accepted Solutions

Hi Pablo,

Did you generate SSH RSA key on the device:

cry key generate rsa mod 1024

Also share the output of show ip ssh

Regards,

Aditya

Please rate helpful and mark correct answers

View solution in original post

6 Replies 6

Hello,

what does your configuration look like ? Like this ?

line vty 0 4

access-class 22 in

transport input all

password cisco

login

This is what I have

line vty 0 4
transport input ssh

Hi Pablo,

Did you generate SSH RSA key on the device:

cry key generate rsa mod 1024

Also share the output of show ip ssh

Regards,

Aditya

Please rate helpful and mark correct answers

Enable the RSA cryto Key will affect anything in the configuration of the device?

Hi

It will just create 1 pair of RSA keys, private and public for SSH. The rest of the config will not be affected. 




>> Marcar como útil o contestado, si la respuesta resolvió la duda, esto ayuda a futuras consultas de otros miembros de la comunidad. <<

Julio E. Moisa
VIP Alumni
VIP Alumni

Hi Pablo,

If you are using local credentials, you should have something like:

no aaa new-model

ip domain name test.com
ip ssh ver 2

crypto key generate rsa  (type 1024 at least and press enter)

line vty 0 15
transport input ssh
login local
access-class 22 in




>> Marcar como útil o contestado, si la respuesta resolvió la duda, esto ayuda a futuras consultas de otros miembros de la comunidad. <<