C2960L-SM - ssh connection not possible

[tokon]

Hi,

I have a C2960L-SM and noticed that I can't connect over ssh anymore. I get

ssh_exchange_identification: Connection closed by remote host

If I run show ip ssh it seems ssh is running:

SSH Enabled - version 1.99 ... and so on

What can I do? Especially with this smart managed switch, where I have only resticted access to CLI?

best regards,

tokon

[tokon]

This is caused to the limited CLI access of this smart switch:

Switch#configure terminal
^
% Invalid input detected at '^' marker.

Switch#crypto key zeroize rsa
^
% Invalid input detected at '^' marker.

[marce1000]

                   - As you say , you need sufficient privileges to carry on with that.

 M.

[balaji.bandi]

make sure you login user with privilege 15

[pieterh]

do you have any other SMART switches in your network ?

if so you may need to connect to the "director" to manage the switch

[tokon]

No, I have only this switch.

[tokon · Accepted solution]

I have testet some things over the weekend:

- factory reset - ssh still not working

- downgrade to 15.2(7)E2 - ssh is working

So it's either a firmware bug or they have removed ssh with 15.2(7)E3 for this switch model.

[rhanzlcisco]

Threre has been a change in default behavior, I also learned it the hard way

In older releases, ssh and telnet input transports were enabled by default without any explicit config under line vty. With more recent images (I only tried 15.2.(7)E6)), if the startup config has no explicit "transport input xxx" config under vty line, it becomes "transport input none" when the image boots and no remote access is allowed.  CSCvv00134 might be related, although it says ssh will be enabled by default which isn't, so I cannot really tell what exactly it is doing, I no longer have access to internal cisco ddts database... 

So configure "transport input ssh" or "transport input all" prior upgrading, otherwise the remote access is lost after the upgrade.

[Georg Pauwen]

Hello,

chances are that you have indeed hit a bug. Actually, 15.2.7E2 MD (and not E3) is the recommended release).

[Henning-Kihle]

Hi.

This command does the trick, all software after 15.2(7)E0a

Lne vty 0 4 (5 15)

  transport input ssh

Does not show in "show run" later but works