Unable to ssh/telnet into Nexus 7010.

jaijo01 · ‎04-08-2013

Getting the following error when enable "terminal monitor" on it.

UDC-CS-L05-02# 2013 Apr 8 18:15:52 UDC-CS-L05-02 %LOCAL7-3-SYSTEM_MSG: getsockname: Socket operation on non-socket (errno = 88) - dcos-xinetd[25617]

2013 Apr 8 18:15:52 UDC-CS-L05-02 %LOCAL7-3-SYSTEM_MSG: Failed to contact identity server at ::ffff:203.8.5.74: system error - dcos-xinetd[25617]

Nexus running on the following version:

Cisco Nexus Operating System (NX-OS) Software

TAC support: http://www.cisco.com/tac

The copyrights to certain works contained in this software are

owned by other third parties and used and distributed under

license. Certain components of this software are licensed under

the GNU General Public License (GPL) version 2.0 or the GNU

Lesser General Public License (LGPL) Version 2.1. A copy of each

such license is available at

http://www.opensource.org/licenses/gpl-2.0.php and

http://www.opensource.org/licenses/lgpl-2.1.php

Software

BIOS: version 3.17.0

loader: version N/A

kickstart: version 4.2(2a)

system: version 4.2(2a)

BIOS compile time: 03/23/08

kickstart image file is: bootflash:/n7000-s1-kickstart.4.2.2a.bin

kickstart compile time: 9/25/2009 9:00:00 [09/28/2009 06:06:24]

system image file is: bootflash:/n7000-s1-dk9.4.2.2a.bin

system compile time: 9/25/2009 9:00:00 [09/28/2009 06:35:38]

Hardware

cisco Nexus7000 C7010 (10 Slot) Chassis ("Supervisor module-1X")

Intel(R) Xeon(R) CPU with 4129600 kB of memory.

Processor Board ID JAF1409BCBE

Device name: UDC-CS-L05-02

bootflash: 2000880 kB

slot0: 0 kB (expansion flash)

Kernel uptime is 1096 day(s), 1 hour(s), 54 minute(s), 23 second(s)

Last reset

Reason: Unknown

System version: 4.2(2a)

Service:

plugin

Core Plugin, Ethernet Plugin

CMP (Module 6) ok

CMP Software

CMP BIOS version: 02.01.05

CMP Image version: 4.2(1) [build 4.2(1)]

CMP BIOS compile time: 7/13/2008 19:44:27

CMP Image compile time: 9/25/2009 9:00:00

CMP (Module 5) ok

CMP Software

CMP BIOS version: 02.01.05

CMP Image version: 4.2(1) [build 4.2(1)]

CMP BIOS compile time: 7/13/2008 19:44:27

CMP Image compile time: 9/25/2009 9:00:00

InayathUlla Sharieff · ‎04-08-2013

Hi Chandran,

First thing first is the firmware which you are running on the device is quite old and it could be bug for this issue.

Hence I request you to plan for the software upgrade first before we torubleshoot this issue.

HTH

Regards

Inayath

*Plz rate the usefull posts.

jaijo01 · ‎04-08-2013

Hi Inayath,

Yes, i know the firmware is quite old.

The thing is we have another 8 devices wit the same firmware but no issues. I can telnet to it from a device connected to it.

But it randomly fails and i cant telnet from my source. I get the following error:

UDC-CS-L05-02# 2013 Apr 8 18:15:52 UDC-CS-L05-02 %LOCAL7-3-SYSTEM_MSG: getsockname: Socket operation on non-socket (errno = 88) - dcos-xinetd[25617]

2013 Apr 8 18:15:52 UDC-CS-L05-02 %LOCAL7-3-SYSTEM_MSG: Failed to contact identity server at ::ffff:203.8.5.74: system error - dcos-xinetd[25617]

The rest of the 8 devices, i have no issues telnetting from my source.

The configuration are all same.

Marcel Zehnder · ‎04-08-2013

Hi Jai

Try the following on your box:

no feature telnet

no feature ssh

feature telnet

feature ssh

HTH

Marcel

jaijo01 · ‎04-08-2013

Hi Marcel,

I do not console access to the device. Disabling/renabling the ssh and telnet feature.

Will it disconnect me from the current seeion?

Thanks.

InayathUlla Sharieff · ‎04-08-2013

Hi Jay,

1-Kindly check if there are any access-list blocking the telnet session?

2- If you have telnet to the device then before disabling it enable the SSH and generate the key for the same and try ssh into the device?

Below is the method:

http://www.cisco.com/en/US/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_ssh.html

Please let us know if this doesnt help.

HTH

Regards

Inayath

jaijo01 · ‎04-08-2013

Tried the following on your box:

no feature telnet

no feature ssh

feature telnet

feature ssh

But still did not work.......

There's no access-list blocking access as well...

Any other ideas?