Is this calculated dynamically?  Meaning, each time i run the show log command, is this data recalculated? ... View more

Tom, I've checked and we are not suing GVRP.  I'm not sure that I understand your comments about the macro... Sorry, I'm just new to the networking world, so I apologize for being "thick". Can you give a few more details about what you mean? Thank you ... View more

Tom, I've recreated the problem... please check out the series of commands below: SAM-A1-SW-1#show interfaces switchport fa1 Port : fa1 Port Mode: Trunk Gvrp Status: disabled Ingress Filtering: true Acceptable Frame Type: admitAll Ingress UnTagged VLAN ( NATIVE ): 29 Port is member in: Vlan               Name               Egress rule Port Membership Type ---- -------------------------------- ----------- -------------------- 29                 29                 Untagged          Static        70                 70                  Tagged           Static        80                 80                  Tagged           Static        Forbidden VLANS: Vlan               Name               ---- -------------------------------- Classification rules: Mac based VLANs:   Group ID   Vlan ID ------------ ------- SAM-A1-SW-1#conf t SAM-A1-SW-1config)#int fa1                                                                                                                                                                                            SAM-A1-SW-1(config-if)#switchport trunk allowed vlan remove 80                                                                            SAM-A1-SW-1(config-if)#exit                                                                                                               SAM-A1-SW-1(config)#do show interfaces switchport fa1                                                                                     Port : fa1                                                                                                                                    Port Mode: Trunk                                                                                                                              Gvrp Status: disabled                                                                                                                         Ingress Filtering: true                                                                                                                       Acceptable Frame Type: admitAll                                                                                                                    Ingress UnTagged VLAN ( NATIVE ): 1                                                                                                                Port is member in:                                                                                                                                 Vlan               Name               Egress rule Port Membership Type                                                                             ---- -------------------------------- ----------- --------------------                                                                                       1                  1                  Untagged          System                                                                                              29                 29                  Tagged           Static                                                                                              70                 70                  Tagged           Static                                                                                              Forbidden VLANS:                                                                                                                                                    Vlan               Name                                                                                                                                             ---- --------------------------------                                                                                                                               Classification rules:                                                                                                                                                    Mac based VLANs:   Group ID   Vlan ID ------------ ------- SAM-A1-SW-1(config)# Notice how after i removed the tagged vlan 80, the system has changed my Untagged vlan from 29 to 1. Any suggestions? ... View more

After doing some research, here's the solution to our problem.  Others may have resolved in a different way, but this seems to work for us. What we noticed is the following: 1.  popular ssh libraries like phpseclib were failing on this switch because of the limited ssh implementation. 2.  php's ssh2_auth_none function returns TRUE on this switch.  What does this mean?  It seems that the ssh protocol has an authentication method called  "none". This is insecure, and is usually disabled on most switches. The ssh2_auth_none() function attempts to connect without any authentication and if it fails, it returns a list of the authentication methods that the server accepts.  In the case of the SF300.. it DOES NOT FAIL and returns nothing for the authentication methods. 3. Known CLI and SSH Limitations Although they weren't able to give us a solution, CISCO tech support did explicitly state that the small business class switches have a  limited CLI and a pared down version of SSH as well so you cannot treat  it as you an enterprise level switch that has a full blown ssh  implementation. In case it helps, here's a little snippet of code that shows how to connect to these types of devices: Hope this helps anyone who's attempting to connect to these types of devices programmatically. ... View more

Johnnatan, Thanks for the response.  But can you clarify your comment?  Do you mean that since I  am using a radius server, I cannot avoid being prompted twice for the  username? As far as putty is concerned, I'm actually going to be connecting programmatically to the switch using phpseclib. But I'm just trying to run some tests manually, and so I am using a terminal session. Thanks. ... View more

Hi there. Thanks for the response. I've been away for a little while which is why I didn't respond sooner.   In any case, one thing I forgot to mention is that we are trying to use a radius server for authentication.  so we are not using public keys. Does that change the solution that you've posted above?  As a test, i just tried connecting using ssh -l but it still prompts me for the username again. I'm trying to figure out how to accomplish step 5 in your post, but in the mean time, I thought I'd ask about how / if radius changes anything as far as your post is concerned. thanks.   ... View more