cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1683
Views
15
Helpful
10
Replies

Unable to telnet to Switch 3750 even on the same VLAN

felippepereira
Level 1
Level 1

Can somebody help me find out why I lost the telnet access to this switch?

 

I can  only access it through console port.

 

This is what I've got by enabling debug telnet:

Jan 14 18:11:49.937 UTC: Telnet1: 1 1 251 1
Jan 14 18:11:49.937 UTC: TCP1: Telnet sent WILL ECHO (1)
Jan 14 18:11:49.937 UTC: Telnet1: 2 2 251 3
Jan 14 18:11:49.937 UTC: TCP1: Telnet sent WILL SUPPRESS-GA (3)
Jan 14 18:11:49.937 UTC: Telnet1: 80000 80000 253 24
Jan 14 18:11:49.937 UTC: TCP1: Telnet sent DO TTY-TYPE (24)
Jan 14 18:11:49.937 UTC: Telnet1: 10000000 10000000 253 31
Jan 14 18:11:49.937 UTC: TCP1: Telnet sent DO WINDOW-SIZE (31)

 

The running-config is attached. (The user and passwords, also enable, are set but has been suppressed from the config)

 

Thank you,

Felippe Viana Pereira

1 Accepted Solution

Accepted Solutions

I also tried from another switch directly connected and on the same VLAN.

PTPRT-SW3-P2-C2960-48#telnet 10.64.20.1
Trying 10.64.20.1 ... Open

[Connection to 10.64.20.1 closed by foreign host]
PTPRT-SW3-P2-C2960-48#ssh 10.64.20.1

Password:

[Connection to 10.64.20.1 closed by foreign host]

View solution in original post

10 Replies 10

Hello,

 

from where are you initiating the TELNET, what application are you using ?

Hi Georg,

 

I'm using Putty and I'm connected on the VLAN120.

 

My default gateway on the computer is the interface VLAN120 IP address.

To add , from the pc your trying to connect to , do you have ping to the ip address your trying to telnet too ?

this can cause all your sessions to lock and stop telnet working , your telling it to always keep the session open , they could be all hung , check the vty ports and close them

Change this and close your lines and telnet may start again
exec-timeout 0 0



sh line
Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
0 CTY - - - - - 0 0 0/0 -
* 1 VTY - - - - 166 7898 0 0/0 -
2 VTY - - - - 166 424 0 0/0 -
3 VTY - - - - 166 99 0 0/0 -
4 VTY - - - - 166 4 0 0/0 -
5 VTY - - - - 166 2 0 0/0 -
6 VTY - - - - 166 0 0 0/0 -
7 VTY - - - - 166 0 0 0/0 -
8 VTY - - - - 166 0 0 0/0 -
9 VTY - - - - 166 0 0 0/0 -
10 VTY - - - - 166 0 0 0/0 -
11 VTY - - - - 166 0 0 0/0 -
12 VTY - - - - 166 0 0 0/0 -
13 VTY - - - - 166 0 0 0/0 -
14 VTY - - - - 166 0 0 0/0 -
15 VTY - - - - 166 0 0 0/0 -
16 VTY - - - - 166 0 0 0/0 -

Yes, I can ping it.

 

My address:

IPv4 Address. . . . . . . . . . . : 10.64.21.11
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 10.64.20.1

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :

C:\Users\Felippe Viana>ping 10.64.20.1

Pinging 10.64.20.1 with 32 bytes of data:
Reply from 10.64.20.1: bytes=32 time=3ms TTL=255
Reply from 10.64.20.1: bytes=32 time=4ms TTL=255
Reply from 10.64.20.1: bytes=32 time=3ms TTL=255
Reply from 10.64.20.1: bytes=32 time=2ms TTL=255

Ping statistics for 10.64.20.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 4ms, Average = 3ms

 

And this is what I have on the line sessions:

PTPRT-SW1-P2-C3750-24#sh line
Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
* 0 CTY - - - - - 0 2 0/0 -
1 VTY - - - - - 15 0 0/0 -
2 VTY - - - - - 0 0 0/0 -
3 VTY - - - - - 0 0 0/0 -
4 VTY - - - - - 0 0 0/0 -
5 VTY - - - - - 0 0 0/0 -
6 VTY - - - - - 0 0 0/0 -
7 VTY - - - - - 0 0 0/0 -
8 VTY - - - - - 0 0 0/0 -
9 VTY - - - - - 0 0 0/0 -
10 VTY - - - - - 0 0 0/0 -
11 VTY - - - - - 0 0 0/0 -
12 VTY - - - - - 0 0 0/0 -
13 VTY - - - - - 0 0 0/0 -
14 VTY - - - - - 0 0 0/0 -
15 VTY - - - - - 0 0 0/0 -
16 VTY - - - - - 0 0 0/0 -

have you tried to enable ssh , just to see if its a feature issue , shouldnt use telnet anyway , on new switches its all ssh by default , your running a k9 image so its supported crypto , much more secure

Global config
ip ssh time-out 120
ip ssh authentication-retries 3
ip ssh ver 2
ip domain-name ssh.com

then create the SSH keys with commands below in global config .....
crypto key generate rsa
Then hit return and tyep 2048 to generate an ssh version 2 key

Check its enabled with show ip ssh , should look like below

sh ip ssh
SSH Enabled - version 1.99
Authentication methods:publickey,keyboard-interactive,password
Authentication Publickey Algorithms:x509v3-ssh-rsa,ssh-rsa
Hostkey Algorithms:x509v3-ssh-rsa,ssh-rsa


Then use putty again but select ssh with port 22

if that works , turn off telnet on the VTY port by selecting input only as SSH
https://www.thegeekstuff.com/2013/08/enable-ssh-cisco/




Thank you Mark, but it also didn't work.

 

I've done the crypto key generation and this is only what it shows:

 

PTPRT-SW1-P2-C3750-24#sh ip ssh
SSH Enabled - version 2.0
Authentication timeout: 120 secs; Authentication retries: 3

 

The switch also prompts for username and password but after typing it closes the session.

I've followed all the instructions on the link and nothing changed, so I thinking that it would maybe need a firmware upgrade. What do you think?

I also tried from another switch directly connected and on the same VLAN.

PTPRT-SW3-P2-C2960-48#telnet 10.64.20.1
Trying 10.64.20.1 ... Open

[Connection to 10.64.20.1 closed by foreign host]
PTPRT-SW3-P2-C2960-48#ssh 10.64.20.1

Password:

[Connection to 10.64.20.1 closed by foreign host]

remove no exec from under the vty config try again
i think thats disabling it

Bingo!

It was "no exec" command.

 

Thanks a lot for the help!!

ah great , no probs
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card