About Andreas Wittemann

Andreas Wittemann · 10-02-2025

SSH Access Segmentation Challenge on ISR4300/IOS-XE 17.12.4a Platform Hardware: ISR4331, ISR4321 (ISR4300 series)Software: IOS-XE 17.12.04a Objective Implement SSH access with two different security policies based on authentication method: Public key...

Andreas Wittemann · 05-10-2023

Hi guys, we are actually struggling to integrate the new 840 phones in the Jabber client as controlled device. It worked with the 79xx, 88xx, all the used phones before, regardless if wired or wireless, the config on the callmanager seems to be corre...

Andreas Wittemann · 04-27-2023

Hi guys, i´m a bit confused, what worked like a charm for many many years seems not to work for me anymore, actually the first time. I put in a username/secret like follows: username blabla privilege 15 secret <Cleartextpassword> Afterwards i take th...

Andreas Wittemann · 12-02-2022

Hi together, since i am scratching my head actually about an upcoming refresh of some datacenter infrastructure at a customer, i would be delighted to get some input about what others did. We have two times 2x 5548 / some Fexes as TOR switches in two...

Andreas Wittemann · 09-10-2020

Hi guys, is there any possibility to speed up the reboot process of the newer ISRs?I have to admit it´s severely pissing me off to see an ISR taking 356 seconds according to its own syslog for a reload, given a BLANK configuration.The beloved "reload...

Andreas Wittemann · 09-07-2026

Hi,the rotary group approach was what didn´t work for me anymore under IOS-XE, which did a perfect job under old IOS back then...a very long time ago  , maybe you overread this. also we have no external authentication / AAA-servers there, and we def...

Andreas Wittemann · 09-07-2026

Hi Rick,that actually sounds like being worth a try, will do it as soon i find some time. Since the group of people using SSH on the devices is limited to a handful, while most of them using a jumphost anyways (not me), i see not a big problem using ...

Andreas Wittemann · 08-05-2026

Hi,actually not...it was hyperannoying, especially considering i had exactly such a solution working some years ago. I simply am not able to to it under IOS-XE. If you may have progress on this, i´d be happy to hear of it.BR,Andreas

Andreas Wittemann · 10-01-2024

Thanks, you nailed it. This was my problem. And actually it makes sense, even there could be some hint from IOS 

Andreas Wittemann · 06-18-2024

no worries...fully busy with other topics, just fot back to that yesterday evening...and the whole day

Member Since	‎09-23-2009 02:28 AM
Date Last Visited	‎09-11-2026 02:38 PM
Posts	139
Total Helpful Votes Received	23

User Statistics

User Activity

Securing SSH access on routers, combined approach, NO AAA-servers

Cisco CP-840 as controlled device in Jabber-Client / CUCM14/IM&P14

Not possible anymore to copy/paste a preencrypted (Type 9) user/secret

Some input about a datacenter refresh with (by now) Nexus Switches

ISR4331, any possibility to speed up reload/reboot?

Re: Securing SSH access on routers, combined approach, NO AAA-servers

Re: Securing SSH access on routers, combined approach, NO AAA-servers

Re: Securing SSH access on routers, combined approach, NO AAA-servers

Re: Not possible anymore to copy/paste a preencrypted (Type 9) user/se

Re: FQDN-object groups...help needed