07-26-2019 08:02 AM
Running into a proble, we just purchased some 4500E switches with 2 supervisors.
I can not get SSh working to allow connection so we can SSH in to do programming.
i have given it an
IP address..
assigned the domain
aaa new model
crypto key generate rsa
added vtp (it gets all the correct vlan info )
program the vty lines.
but it times out when trying to connect.
is there something special that i have to do for the 4500e ????
Solved! Go to Solution.
08-23-2019 10:27 AM
i figured it out.
aaa new-model
!
!
aaa group server radius RADIUS_AUTH
server 172.20.253.222 auth-port 1812 acct-port 1813
!
aaa authentication login networkaccess group radius local enable
aaa authorization exec default group RADIUS_AUTH local if-authenticated
aaa authorization exec RADIUS_AUTH local if-authenticated
!
radius server RADIUS_AUTH
key 7 7DXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX5C
07-26-2019 08:31 AM
Can you post the output of "sh ver"
In order to use SSH, you need an IOS with "k9" in the ios name.
example:
CAT3K_CAA-UNIVERSALK9-M
HTH
07-26-2019 09:50 AM
thank you. i will look into upgrading
07-29-2019 08:10 AM
darn.. so here is the boot image
System image file is "bootflash:cat4500es8-universalk9.SPA.03.06.03.E.152-2.E3.bin"
but i can NOT get it to allow to remote in using SSH.
any thoughts?
07-29-2019 08:20 AM
07-29-2019 08:37 AM
Sorry i am new to this model number
sh ssh
%No SSHv2 server connections running.
%No SSHv1 server connections running.
so here is the VTY
line vty 0 4
access-class 99 in
exec-timeout 0 0
password 7 071B24404D080D
login authentication networkaccess
length 0
transport input ssh
line vty 5 10
access-class 99 in
exec-timeout 0 0
password 7 071B24404D080D
login authentication networkaccess
length 0
transport input ssh
line vty 11 15
access-class 99 in
exec-timeout 0 0
password 7 071B24404D080D
login authentication networkaccess
length 0
07-29-2019 08:42 AM - edited 07-29-2019 08:45 AM
since this is a new piece of equipmwent, i do not want it to manage all SSH to the switches that are currently on site.
I just want to be able to connect to this 4500 so my boss can start to program it
07-29-2019 08:54 AM
07-29-2019 09:05 AM
hi there
yes i see in the access list 99 the ip address of my laptop thats trying to connect...
but i did remove it from line vtp 0 15 and still no luck.
i gave it a host name
so i gave it an IP address (vlan 1)
ip domain-name
I added it to vtp (got all vlans and info)
i ran crypto key generate rsa
am i missing something
07-29-2019 12:45 PM
anyone HELP please :)
07-29-2019 03:52 PM
Hi,
Follow this document to configure SSH and verify it is configured correctly.
HTH
08-23-2019 10:27 AM
i figured it out.
aaa new-model
!
!
aaa group server radius RADIUS_AUTH
server 172.20.253.222 auth-port 1812 acct-port 1813
!
aaa authentication login networkaccess group radius local enable
aaa authorization exec default group RADIUS_AUTH local if-authenticated
aaa authorization exec RADIUS_AUTH local if-authenticated
!
radius server RADIUS_AUTH
key 7 7DXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX5C
07-30-2019 12:02 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide