Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About stolar
Stats
Member since
06-13-2018
7
Posts
0
Helpful
1
Solution
08-23-2019
01:23 AM
I've found reason for that behavior, clue appeared from Router issues. Just added on line vty: access-list NAME in vrf-also After that all runs smoothly, VTY is with ACL secured and allows SSH from permited list. Case closed.
... View more
07-11-2019
04:57 AM
Then how would you explain matches on acl with IP-Range of my laptop? Match counters was cleared before checking, extra deny any any was added at the end of acl for counting matches rest of traffic. I've seen my own IP with show users on that switch when no acl was applied.
... View more
07-11-2019
12:45 AM
It's not a routing issue, as everything works well without acl on vty. Gi0/0 uses vrf instance, thats right. This particulary switch (Name 1) is connected on backpanel Mgmt-Port, other end is connected to a Switchport from another Switch (Name 2) where Mgmt VLAN as access VLAN is configured. The plan is to hold all VLANs from Switch Name 1 from production with possible remote maintenance. Thats why this one switch uses Mgmt-Port.
... View more
07-09-2019
03:48 AM
Hi Cisco Community, Last week I've updated Catalysts 3850 with one of actually Cisco recommended firmware, from 16.3.6 to ver. 16.3.8. All but one of our switches are in-band managed. This one is out-of-band managed and suffers of a strange behavior. After reboot I couldn't access that switch per SSH, SSH-Client gives "Connection refused". After short troubelshooting I've encountered, that an ACL, which is applied to vty lines and worked on 16.3.6, causes that problem. These ACL acts perfectly at all other in-band 3850. I've also zeroed match counters on that ACL to proof hits, and it shows 3 matches for one ssh attempt on permited line. Still, I am unable to connect via SSH. When I take that ACL out of vty configuration, access via SSH works perfectly, but letting vty without access restrictions is not an option. Can someone explain that behavior, hopefuly with a proper ongoing? Any ideas will be appreciated. Best Regards, Greg
... View more
Labels:
08-23-2019
I've found reason for that behavior, clue appeared from Router issues.
Just added on line vty:access...
07-11-2019
Then how would you explain matches on acl with IP-Range of my laptop?
Match counters was cleared bef...
07-11-2019
It's not a routing issue, as everything works well without acl on vty.
Gi0/0 uses vrf instance, that...
Public Statistics
| Date Registered | 06-13-2018 07:19 AM |
| Date Last Visited | 09-25-2019 12:21 AM |
| Total Messages Posted | 7 |
.jpg "VIP Advisor"){kind=icon}
