cisco 2960 access ssh from another vlan

[domoticity]

Hy everybody.

I have a cisco rv325 ans a cisco 2960.

I will need to access to my switch from another vlan and,if possible, from outside LAN.

i have created a vlan in the switch specially for this.

i can access ssh when i use the port which is in this vlan.

but from another vlans i can't.

Can somebody help me :) ?

Here my configuration :

Switch-Cisco#sh conf
Using 5280 out of 65536 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Switch-Cisco
!
boot-start-marker
boot-end-marker
!
enable password XXXXXXX
!
username admin secret 5 XXXXX
username domoticity secret 5 XXXXXXXXXXXXXXX
!
!
aaa new-model
!
!
aaa authentication login default local
!
!
!
aaa session-id common
system mtu routing 1500
ip dhcp excluded-address 192.168.0.1 192.168.0.99
ip dhcp excluded-address 192.168.0.104 192.168.0.254
!
ip dhcp pool systeme
   network 192.168.0.0 255.255.255.0
   dns-server 8.8.8.8
   default-router 192.168.0.1
!
!
!
!
crypto pki trustpoint TP-self-signed-952440448
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-952440448
 revocation-check none
 rsakeypair TP-self-signed-952440448
!
!
crypto pki certificate chain TP-self-signed-952440448
 certificate self-signed 01 nvram:IOS-Self-Sig#3839.cer
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
ip ssh time-out 60
ip ssh logging events
ip ssh version 2
!
interface FastEthernet0/1
 description acces ssh
 switchport access vlan 101
 switchport mode access
!
interface FastEthernet0/2
 description trunk vlan 2 domoticity
 switchport trunk allowed vlan 2
 switchport mode trunk
!
interface FastEthernet0/3
 description trunk vlan 3 casa et multimedia
 switchport trunk allowed vlan 3
 switchport mode trunk
!
interface FastEthernet0/4
 switchport trunk allowed vlan none
!
interface FastEthernet0/5
 description trunk vlan 5 domotique et camera
 switchport trunk allowed vlan 5
 switchport mode trunk
!
interface FastEthernet0/6
 description trunk vlan 6 watchdog
 switchport trunk allowed vlan 6
 switchport mode trunk
!
interface FastEthernet0/7
 description trunk vlan 7 telephonie
 switchport trunk allowed vlan 7
 switchport mode trunk
!
interface FastEthernet0/8
 description reseau domotique camera
 switchport access vlan 5
 switchport mode access
!
interface FastEthernet0/9
 description reseau domotique camera
 switchport access vlan 5
 switchport mode access
!
interface FastEthernet0/10
 description reseau domotique camera
 switchport access vlan 5
 switchport mode access
!
interface FastEthernet0/11
 description reseau domoticity
 switchport access vlan 2
 switchport mode access
!
interface FastEthernet0/12
 description reseau telephonie
 switchport access vlan 7
 switchport mode access
!
interface FastEthernet0/13
 description reseau telephonie
 switchport access vlan 7
 switchport mode access
!
interface FastEthernet0/14
 description reseau casa multimedia
 switchport access vlan 3
 switchport mode access
!
interface FastEthernet0/15
 description reseau casa multimedia
 switchport access vlan 3
 switchport mode access
!
interface FastEthernet0/16
 description reseau casa multimedia
 switchport access vlan 3
 switchport mode access
!
interface FastEthernet0/17
 description reseau casa multimedia
 switchport access vlan 3
 switchport mode access
!
interface FastEthernet0/18
 description reseau casa multimedia
 switchport access vlan 3
 switchport mode access
!
interface FastEthernet0/19
 description reseau casa multimedia
 switchport access vlan 3
 switchport mode access
!
interface FastEthernet0/20
 description reseau casa multimedia
 switchport access vlan 3
 switchport mode access
!
interface FastEthernet0/21
 description reseau telephonie
 switchport access vlan 7
 switchport mode access
!
interface FastEthernet0/22
 description reseau stockage imprimante
 switchport access vlan 4
 switchport mode access
!
interface FastEthernet0/23
 description reseau domoticity
 switchport access vlan 2
 switchport mode access
!
interface FastEthernet0/24
!
interface FastEthernet0/25
!
interface FastEthernet0/26
!
interface FastEthernet0/27
!
interface FastEthernet0/28
!
interface FastEthernet0/29
!
interface FastEthernet0/30
!
interface FastEthernet0/31
!
interface FastEthernet0/32
!
interface FastEthernet0/33
!
interface FastEthernet0/34
!
interface FastEthernet0/35
!
interface FastEthernet0/36
!
interface FastEthernet0/37
!
interface FastEthernet0/38
!
interface FastEthernet0/39
!
interface FastEthernet0/40
!
interface FastEthernet0/41
!
interface FastEthernet0/42
!
interface FastEthernet0/43
!
interface FastEthernet0/44
!
interface FastEthernet0/45
!
interface FastEthernet0/46
!
interface FastEthernet0/47
!
interface FastEthernet0/48
!
interface GigabitEthernet0/1
 description trunk vlan 4 nas et imprimantes
 switchport trunk allowed vlan 4
 switchport mode trunk
!
interface GigabitEthernet0/2
 description reseau stockage imprimante
 switchport access vlan 4
 switchport mode access
!
interface Vlan1
 description vlan defaut
 ip address 10.10.10.1 255.255.255.0
 no ip route-cache
!
interface Vlan101
 description Vlan systeme
 ip address 192.168.0.1 255.255.255.0
 no ip route-cache
!
ip http server
ip http port 1080
ip http access-class 10
ip http authentication local
ip http secure-server
ip http max-connections 2
ip http timeout-policy idle 50 life 120 requests 100
vstack
!
line con 0
line vty 0 4
 access-class 10 in
 transport input ssh
line vty 5 15
 access-class 10 in
 privilege level 15
 transport input ssh
!
end

thanks in advance

[balaji.bandi]

What VLAN you created for this, from what IP address range you are not able to connect ?

i do not see any routing in your config.

[domoticity]

Hy,
thank you for your answer.
the vlan for ssh is the 101

!
interface Vlan101
description Vlan systeme
ip address 192.168.0.1 255.255.255.0
no ip route-cache
!
The tohers vlan is managed by the cisco rv325, with intervlan allowed.

[balaji.bandi]

I do not see route configuration done here, you need routing between switch and rv325 , what is other VLAN you failed to connect, what is the IP address you try to connect from  to  192.168.0.1 ?

[domoticity]

hy,

thanks again to answer me :)

the other ip address are : 192.168.2.0/24, 192.168.3.0/24 and 10.0.10.0/24.

[domoticity]

Switch-Cisco#sh ip route
                    ^
% Invalid input detected at '^' marker.

Switch-Cisco#

hy again, :p

can we etablish route in the cisco 2960?

[Martin Carr]

The 2960 is a L2 switch, although it can do basic routing with the correct software, hence you getting that error.

You would need to configure a default gateway (ip default-gateway x.x.x.x).

Martin

[balaji.bandi]

in addition to other post, if you have right image.

you can do below steps :

config t

ip routing  - enable routing

ip route src-ip to destination - replace src-ip and designation ip or interface

[domoticity]

hy

thank you for your help again.

But i don't manage to do your command :

Switch-Cisco(config)#ip routing
                         ^
% Invalid input detected at '^' marker.

[balaji.bandi]

can you post show version.

[domoticity]

hy :)
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 50 WS-C2960-48TC-S 12.2(55)SE12 C2960-LANLITEK9-M

[domoticity]

Hy,
i have updated my ios :

Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 50 WS-C2960-48TC-S 15.0(2)SE11 C2960-LANLITEK9-M

But same Problem :
Switch-Cisco(config)#ip routing
^
% Invalid input detected at '^' marker.

[Martin Carr · Accepted solution]

You need lanbase and the correct SDM template applied.

This isn't required for what you are trying to achieve, I would simply configure a gateway.

Martin

[domoticity]

Hy
Thank you, it works very well :)