01-16-2012 01:46 AM - edited 03-07-2019 04:22 AM
I have two stacks of 3750 switches with the following configuration:
1:ws-c3750g-12s
2:ws-c3750g-12s
3:ws-c3750g-12s
4:ws-c3750g-48ts
5:ws-c3750v2-24ts
I have just upgraded the software to the Cryptographic Services image in order to use SSH rather than telnet for CLI management. The image I am using is c3750-ipbaselmk9-tar.122-55.SE4 and it was upgraded using the tarball with archive download-sw.
I have enabled SSH and HTTPS using the following commands:
ip domain-name xxxxxx
crypto key generate rsa
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 3
line vty 0 4
transport input ssh
line vty 5 15
transport input ssh
no ip http server
ip http secure-server
ip http authentication local
I can now SSH to the stack CLI and use HTTPS from a web browser but when trying to connect with Cisco Network Assistant I get an unable to connect message. The only way I have been able to get this to work is to enable ip http server. Has anyone else encountered this issue and knows how to resolve?
Thanks,
Phill
Solved! Go to Solution.
01-18-2012 09:03 AM
I have had the same issue, with the newer version of Network Assistant. I get the message on my 3750's, 2960 switches, which are running IOS 122-53.SE2 with Web device Manager. This is with Verison 5.7 that I get this all the time. I ended up down-grading to the 5.6 which does not give me this problem. I believe there is something wrong with the 5.7 version that is preventing any https connections to switches. CISCO NEEDS TO FIX the PROGRAM.
01-16-2012 02:33 AM
Hi Sihanu,
See the below link will help you.
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/hardware/quick/guide/3750GSG3.html#wp56728
Please rate all the helpfull posts.
Regards,
Naidu.
01-16-2012 03:15 AM
Hi,
I can't see anything in the documentation you have linked which refers to the problem I am having. Can you be more specific please.
Thanks,
Phill
01-18-2012 09:03 AM
I have had the same issue, with the newer version of Network Assistant. I get the message on my 3750's, 2960 switches, which are running IOS 122-53.SE2 with Web device Manager. This is with Verison 5.7 that I get this all the time. I ended up down-grading to the 5.6 which does not give me this problem. I believe there is something wrong with the 5.7 version that is preventing any https connections to switches. CISCO NEEDS TO FIX the PROGRAM.
01-18-2012 11:04 AM
I'm glad it's not just me, I noticed today I am also getting this issue on my aironet APs. I recently updated to 5.7 of CNA before I began moving to using SSH and HTTPS.
I will try downgrading to 5.6 and confirm if this resolves the problem for me.
Cheers,
01-19-2012 05:46 AM
As per what krhashbarger posted, I downgraded CNA to 5.6.3 and this now works for all my HTTPS devices.
I agree that this seems to be a problem with version 5.7 which needs to be addressed by Cisco.
Thanks for the help.
01-19-2012 06:13 AM
No problem, glad to help. Hopefully Cisco will come out with a fix soon for this problem.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide