Configure SSH for 4900M

[olsonkyle12]

Hello,

I'm interested in a per command line example to configure SSH on a Cisco 4900M.  There is no TACACs or logging server for SSH on this switch, everything is local to the switch.

[Reza Sharifi · Accepted solution]

Hi,

In order to run SSH you need an IOS image with letter K and number 9 in it

see example

S49MIPBK9-12246SG

[olsonkyle12]

Okay, so I need to download a new image onto the 4900M.  Is there a good article on how to do this with a TFTP server?

[vmiller]

http://www.cisco.com/en/US/partner/products/hw/switches/ps700/products_tech_note09186a008015bfab.shtml

Good starting point.

[vmiller · Accepted solution]

To add to Rezas answer (he types faster than me), read the following.

http://www.cisco.com/en/US/tech/tk583/tk617/technologies_tech_note09186a00800949e2.shtml

Its a pretty good how to

[olsonkyle12]

Installed a crypto IOS and was able to configure Crypto command, but when I try and SSH to the device, the host activley refuses

connection.  Below is my config, please let me know if you see anything missing:

show run
Building configuration...

Current configuration : 3076 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
!
hostname NGS-4900B-RCK5
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 $1$WPDS$KyTSKCBFdTpPfdrZo.spI.
!
username admin password 7 12381F161E0E5C176B
!
!
aaa new-model
!
--More--                           !
!
!
!
aaa session-id common
ip subnet-zero
ip domain-name Grid.local
!
!
ip vrf mgmtVrf
!
vtp mode transparent
!
!
!
power redundancy-mode redundant
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
--More--                           !
vlan 100
name Primary_Server_Subnet
!
vlan 103
name Management_Vlan
!
vlan 104
name Replication_Network
!
ip ssh authentication-retries 5
ip ssh version 1
!
!
interface FastEthernet1
ip vrf forwarding mgmtVrf
no ip address
speed auto
duplex auto
!
interface TenGigabitEthernet1/1
switchport trunk allowed vlan 100-104
switchport mode trunk
--More--                           !
interface TenGigabitEthernet1/2
switchport trunk allowed vlan 100-104
switchport mode trunk
!
interface TenGigabitEthernet1/3
switchport trunk allowed vlan 100-104
switchport mode trunk
!
interface TenGigabitEthernet1/4
switchport trunk allowed vlan 100-104
switchport mode trunk
!
interface TenGigabitEthernet1/5
!
interface TenGigabitEthernet1/6
!
interface TenGigabitEthernet1/7
!
interface TenGigabitEthernet1/8
switchport trunk allowed vlan 100-104
switchport mode trunk
!
--More--                           interface GigabitEthernet3/1
!
interface GigabitEthernet3/2
!
interface GigabitEthernet3/3
!
interface GigabitEthernet3/4
!
interface GigabitEthernet3/5
!
interface GigabitEthernet3/6
!
interface GigabitEthernet3/7
!
interface GigabitEthernet3/8
!
interface GigabitEthernet3/9
!
interface GigabitEthernet3/10
switchport access vlan 100
!
interface GigabitEthernet3/11
!
--More--                           interface GigabitEthernet3/12
!
interface GigabitEthernet3/13
!
interface GigabitEthernet3/14
!
interface GigabitEthernet3/15
!
interface GigabitEthernet3/16
!
interface GigabitEthernet3/17
!
interface GigabitEthernet3/18
!
interface GigabitEthernet3/19
!
interface GigabitEthernet3/20
!
interface Vlan1
no ip address
shutdown
!
interface Vlan100
--More--                            description Primary Server Network
ip address 10.234.240.3 255.255.255.0
ip helper-address 10.234.240.62
standby 1 ip 10.234.240.1
standby 1 timers 1 4
standby 1 priority 104
standby 1 preempt
!
interface Vlan103
description Management Vlan
ip address 10.234.241.3 255.255.255.0
standby 1 ip 10.234.241.1
standby 1 timers 1 4
standby 1 priority 104
standby 1 preempt
!
interface Vlan104
description Replication Network
ip address 10.234.237.131 255.255.255.192
standby 1 ip 10.234.237.129
standby 1 timers 1 4
standby 1 priority 104
standby 1 preempt
--More--                           !
!
router eigrp 100
network 10.234.237.128 0.0.0.63
network 10.234.240.0 0.0.0.255
network 10.234.241.0 0.0.0.255
eigrp stub connected summary
!
ip route 0.0.0.0 0.0.0.0 129.33.202.197
ip http server
no ip http secure-server
!
!
!
!
line con 0
stopbits 1
line vty 0 4
password 7 052A1C0E2D491E1A58
transport input telnet
!
end

NGS-4900B-RCK5#

[vmiller]

check the vty lines (assuming you are telnetting) and add modify the transport input to include ssh