- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 12:32 AM - edited 03-08-2019 01:20 PM
Hi I could do with a little guidance please.
I am setting up a Cisco switch network for the first time. Having completed a 2 day course 2 months ago I am now the "expert" on site.
I have a network of 6 switches; 2 root, 4 edge, in a mesh configuration.
When accessing via Telnet all is well, and I can access any switch from any port, change configuration etc. but now I have invoked SSH I am unable to access any other switch except the one I am physically connected to: "connection refused by remote host" although I can still ping.
Any pointers please?
Solved! Go to Solution.
- Labels:
-
Other Switching
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 12:52 AM
is there ssh setup on those switches for you to access them?
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh source-interface xxxx
ip ssh version 2
line vty 0 4
access-class x in
exec-timeout 30 0
transport input ssh
Then conf t
crypto key generate rsa
type 1024 hit return
That will setup the switch for ssh access , telnet is on by default
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 12:52 AM
is there ssh setup on those switches for you to access them?
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh source-interface xxxx
ip ssh version 2
line vty 0 4
access-class x in
exec-timeout 30 0
transport input ssh
Then conf t
crypto key generate rsa
type 1024 hit return
That will setup the switch for ssh access , telnet is on by default
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 01:54 AM
Hi Mark
I can access each individual switch using SSH when connected directly (at an edge port) but not over the network.
What does this code set?
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh source-interface xxxx
and this?
access-class x in
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 02:04 AM
I can access each individual switch using SSH when connected directly (at an edge port) but not over the network.
are your default gateways in place on the switches ? is the machine you coming form on the same subnet as the switch mgmt. ip ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 02:09 AM
I have no default gateway on the switches.
What do you mean by the switch management IP?
The laptop I am using is on the subnet as the switches.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 02:18 AM
http://www.ciscopress.com/articles/article.asp?p=2181836&seqNum=4
What do you mean by the switch management IP?
The ip address you are trying to ssh too on the switch , that is pingable across the network from your machine yes if its on same subnet ?
if so then there is something up with the switches ssh config your trying to connect too if you cant connect to it but can ping it ok or maybe something blocking it , can you post the show ip ssh off it
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 02:41 AM
Thanks for your time and input Mark.
I have embarrassingly discovered that typing SSH before the IP address connects successfully.............
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 02:42 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 01:11 AM
Hello
Have you enable ssh correctly / do you have any access-list negating ssh access?
ip domain-name xxxx.com
crypto key generate rsa general-keys ( specify the key size)
ip ssh version 2
line vty x x
transport input ssh
res
Paul
Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.
Kind Regards
Paul
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 01:51 AM
Thanks Paul
Do I need "general keys" here?: crypto key generate rsa general-keys
I have generated keys but without that part.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2018 01:59 AM
A little more info............
I have 2 vlans in use, default 1 and vlan 36. All edge ports are assigned on vlan 36.
Could my problem be that I have not set remote span-vlan ?
