Configure SSH V2 IN SWITCH 2960 series

[ferdelriomex]

                   Hi Everybody, sorry in advance but i dont speak english as well as i want.

Well my problem is the next,  i want to configure ssh v2 in a switch 2960 series, i type the next.

sw-apt#config t

sw-apt(config)#ip domain-name wherever

sw-apt(config)#crypto key generate rsa

                          1024

sw-apt(config)#line vty 0 4

sw-apt(config-line)#password   password

sw-apt(config)#ip ssh version 2

sw-apt(config)line vty 0 4

sw-apt(config-line)#transport input ssh.

The problem is that i can still loggin with telnet,  i believe that with this instrucctions i cant loggin with telnet but only with ssh.

Can Anybody give me a tip.

Thanks in advance !!

[ferdelriomex]

Sorry I forget put the release of the IOS

  ( C2960  LANBASEK9-M )

[Richard Burts · Accepted solution]

You have configured 5 vty lines to accept only SSH v2. But I believe that your switch has 16 vty lines and so vty 5 through 15 are still having the default behavior which is to accept telnet.

If you want to verify this I suggest doing show run and paging down to the bottom where the vty lines are configured. I believe that you will see the first section which would be line vty 0 4 (which specify transport input ssh) and then you will see line vty 5 15 which do not specify transport input (which means that they are still at default setting which will accept telnet).

To fix this you need to

config t

line vty 5 15

transport input ssh

Give this a try and let us know how it works.

HTH

Rick

[ferdelriomex]

MASTER  !!!!  thanks a lot Richard the ssh is working rigth now perfectly  !!! 

Only one more question,  i would like to loggin with ssh from MSDOS on WIN7, i dont know if this can be done, actually i loggin using PUTTY ssh, i dont know if i need to install some program to loggin by using msdos.

Thanks you very much in advance !!!!!!

[Richard Burts · Accepted solution]

I am glad that my suggestion was successful in resolving your issue about telnet. Thanks for posting back to the forum and confirming this.

I do not believe that you can just run SSH from the command line in Windows 7. I believe that you need some client installed, of which PUTTY is an example. This link provides comparison between many available clients that support SSH

http://en.wikipedia.org/wiki/Comparison_of_SSH_clients

HTH

Rick

[ferdelriomex]

Thanks a lot Rick, i am go to put ssh on my SW ( i have 10 SW c2960 ) i am rigth now put security with Sticky on all the SW and also want to secure the remote access with SSH,  you helped me a lot.

Regarding the conection to SSH i will still using putty.

Thankyou again !!!!

Regards

Fernando Del Rio