cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
888
Views
10
Helpful
3
Replies

Two switches connection - unable to ssh to sw2

athens45
Level 1
Level 1

We have two l3 switches and one router.

 

SW1 connected to SW2 via trunk

And also connection from sw1 >>>10.253.255.101

to

sw2:

interface GigabitEthernet1/0/48  no switchport  ip address 10.253.255.102 255.255.255.252. 
Made this for test, Idea is to have connection to sw2 also from client machine.
 
From User computers on sw1 we can do ssh to sw1, but not to sw2 (only possible ssh from sw1 directly).
 
Check config files of SW1 , SW2 and router.
All clients are connected on these two switches. How to make sw manageable from client machine.
 

 

 

1 Accepted Solution

Accepted Solutions

Hello
Please review and if applicable amend to your exiting config.

SW2
default interface GigabitEthernet1/0/48
interface GigabitEthernet1/0/48
shut

no ip default-gateway 10.253.255.254
ip default-gateway 10.253.3.1

no ip routing
no ip device tracking

 

SW1

aaa authentication dot1x default group radius local
aaa authorization exec default group radius local if-authenticated
aaa authorization network default group radius local if-authenticated

 

line vty 0 15
login local

 


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

View solution in original post

3 Replies 3

luis_cordova
VIP Alumni
VIP Alumni

Hi @athens45 

 

I suggest you create a vlan301 interface in Sw2 and assign it an IP.
Also, I see that in Sw1 the logging is by AAA and in Sw2 it is local.
You could leave the same method log on both switches.

 

Regards

Hello
Please review and if applicable amend to your exiting config.

SW2
default interface GigabitEthernet1/0/48
interface GigabitEthernet1/0/48
shut

no ip default-gateway 10.253.255.254
ip default-gateway 10.253.3.1

no ip routing
no ip device tracking

 

SW1

aaa authentication dot1x default group radius local
aaa authorization exec default group radius local if-authenticated
aaa authorization network default group radius local if-authenticated

 

line vty 0 15
login local

 


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Deepak Kumar
VIP Alumni
VIP Alumni

Hi,

Make some changes on the Switch 2 as:



no ip default-gateway 10.253.255.254
ip default-gateway 10.253.3.1

!

no ip routing

!

 

Also, remove the Interface 48 configuration because this switch will work as L2.

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!
Review Cisco Networking for a $25 gift card