SSH with VRF

[dndncr101]

Hello,

I'm having issues with SSH on my 3750G-12S.  I'm not able to SSH to another switch when VRFs are configured.

I've tried ip ssh source-interface, ssh -vrf doesn't exsist and I've upgraded the IOS to the latest version.

Has anyone seen this before?

[Pavel Bykov]

Have you tried ssh /vrf ?

[dndncr101]

I did try /vrf and it still doesn't work.  The issue is that there are no vrf commands after ssh.

It's funny but telnet does have the -vrf command.

[Pavel Bykov]

Unfortunately, it seems that on 3750/3560 this is not supported:

VRF-aware support for HSRP, uRPF, ARP, SNMP, IP SLA, TFTP, FTP, syslog, traceroute, and ping

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_55_se/release/notes/OL23054.html

Meaning, there is no VRF-awareness for SSH. At least it is not mentioned in the documentation, and as you said there is no command for it.

Normally, it's like this:

u240#ssh ?

  -c    Select encryption algorithm

  -l    Log in using this user name

  -m    Select HMAC algorithm

  -o    Specify options

  -p    Connect to this port

  -v    Specify SSH Protocol Version

  -vrf  Specify vrf name

  WORD  IP address or hostname of a remote system

[dndncr101]

Thanks,

I just heard from Cisco that its in the road map but no there is no ETA.

I have a fix for now, until the IOS is updated.

[sanjeev.3.singh]

similar issue but with C1760 & WS-C2950-24