No telnet access

[nazmul.alam]

Hello all,

I have a 3750G stack (of two switches) running 12.2 IPBASE

A username and password is configured.

1 SVI is created and is up/up (it is the IP address of the switch).

The following configurations exist:

aaa new-model

aaa authentication login default local

aaa session-id common

line vty 0 4

exec-timeout 0 0

logging synchronous

transport preferred telnet

transport input telnet

transport output telnet

I'm able to ping and telnet from this switch to other devices. I'm able to ping this switch from other devices, but can't telnet to it. I get the following message:

% Connection refused by remote host

I've also tried removing aaa new-model and using login local under the vty lines, but I still have the same problem.

Has anyone come across this issue? Any help is appreciated.

[shanilkumar2003]

Configure enable secret

Sent from Cisco Technical Support iPhone App

[nazmul.alam]

Yes, I do have enable secret configured.

[shanilkumar2003]

Do you have any accesslist configured. And try remove aaa new model and put login local under vty . Also put transport input telnet under vty

Sent from Cisco Technical Support iPhone App

[nazmul.alam]

No accesslist configured. Tried with login local and transport input telnet under vty lines as well. That's why I'm confused...I've tried all the basic things.

[Rolf Fischer]

Can you telnet form the switch itself (telnet to it's own SVI IP-address), perhaps with some aaa-debugging?

What IOS version are you using?

Regards

Rolf

[nazmul.alam]

Doh! I have not tested that yet. I'll need a console connection (I'm not currently on site)...need to test that out next time I get a console connection.

As for the version it's 12.2(35)SE5

Hardware: 2 x WS-C3750G-24TS-1U (stack)

[Rolf Fischer]

As for the version it's 12.2(35)SE5

Pretty old - perhaps a good occasion for an update to something like 12.2(55)SE4?

[nazmul.alam]

Agreed...there's some pretty old stuff in that environment. Including a WS-C2950T-24 running IOS 12.0(5.2)WC(1)

[nazmul.alam]

That's interesting...I can't even telnet from the switch itself to it's own SVI.

I had debug enabled (no output).

debug aaa authentication

I get the same message as when I try to telnet from another switch.

% Connection refused by remote host

[Simon Leigh]

Hi there

Try this.
Line vty 0 15
Login local

Sorry just re read the post.

Please ignore
:)
See if that helps

Sent from Cisco Technical Support iPhone App

[usasigcis · Accepted solution]

Did you create a username? :)

Sent from Cisco Technical Support iPhone App

[nazmul.alam]

Yes, an existing username (with privilege 15) and password exists.

Sorry, I clicked on "Correct Answer" by mistake.

I'll try creating another username and test.

[usasigcis]

Please try to generate crypto key and see if the ssh works
You may need to create domain name and to create crypto key generate rsa modulus 1024

Sent from Cisco Technical Support iPhone App

[nazmul.alam]

I have no option to enable crypto or ssh.

The IOS is c3750-ipbase-mz.122-35.SE5

I may need to upgrade.