cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7808
Views
0
Helpful
7
Replies

Failed access to ASR9K

Abdurahman.Owag
Level 1
Level 1

Hi

I am not able to access my ASR 9010  even by telnet or ssh.(actually the authentication seems to be accepted but showing nothing)

even I failed when I tried to access it by console and I got the following logs:

Press RETURN to get started.


RP/0/RSP0/CPU0:Jul 2 15:56:23.625 CET: SSHD_[65808]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:33.444 CET: SSHD_[65808]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'admin' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:34.372 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'support' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:35.655 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:39.979 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'support' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:41.661 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:43.345 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:45.080 CET: SSHD_[65929]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'guest' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:49.372 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'ubnt' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:51.388 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'info' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:56:58.811 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'test' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:01.568 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'ftpuser' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:04.344 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:05.305 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'vyatta' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:09.386 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'user' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:15.845 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'guest' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:17.270 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:20.710 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'info' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:25.440 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'pi' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:27.942 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:32.898 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'ftpuser' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:38.916 CET: SSHD_[65924]: %SECURITY-SSHD-3-ERR_GENERAL : Error in receiving key exchange packet
RP/0/RSP0/CPU0:Jul 2 15:57:47.660 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:57:55.792 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:58:14.872 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:58:32.961 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:58:51.586 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:58:57.613 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:59:04.640 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:59:13.060 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:59:15.891 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:59:34.149 CET: SSHD_[65923]: %SECURITY-SSHD-3-ERR_GENERAL : Error in receiving key exchange packet
RP/0/RSP0/CPU0:Jul 2 15:59:42.539 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:59:51.575 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 15:59:53.273 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty1'
RP/0/RSP0/CPU0:Jul 2 16:00:20.842 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:00:28.256 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:00:33.043 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:01:01.442 CET: SSHD_[65923]: %SECURITY-SSHD-3-ERR_GENERAL : Error in receiving key exchange packet
RP/0/RSP0/CPU0:Jul 2 16:01:05.840 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:01:14.233 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:01:42.746 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:01:42.820 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty1'
RP/0/RSP0/CPU0:Jul 2 16:01:49.405 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:01:57.917 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:02:16.635 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:02:20.788 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty1'
RP/0/RSP0/CPU0:Jul 2 16:02:26.833 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:02:42.915 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:02:58.498 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:03:02.092 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:03:04.690 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:03:06.298 CET: SSHD_[65929]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty1'
RP/0/RSP0/CPU0:Jul 2 16:03:27.669 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:03:36.991 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:03:37.377 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty1'
RP/0/RSP0/CPU0:Jul 2 16:03:43.862 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:04:15.630 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:04:23.179 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:04:24.025 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty1'
RP/0/RSP0/CPU0:Jul 2 16:04:24.515 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty2'
RP/0/RSP0/CPU0:Jul 2 16:04:53.613 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:04:59.574 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:05:03.539 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:05:11.461 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:05:34.525 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:05:43.705 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:05:54.105 CET: SSHD_[65924]: %SECURITY-SSHD-3-ERR_GENERAL : Error in receiving key exchange packet
RP/0/RSP0/CPU0:Jul 2 16:05:54.266 CET: SSHD_[65923]: %SECURITY-SSHD-3-ERR_GENERAL : Failed in version exchange
RP/0/RSP0/CPU0:Jul 2 16:06:00.673 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'admin' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:07.832 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'support' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:11.871 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:20.473 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'test' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:21.516 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:26.878 CET: SSHD_[65923]: %SECURITY-SSHD-3-ERR_GENERAL : Error in receiving key exchange packet
RP/0/RSP0/CPU0:Jul 2 16:06:30.528 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:33.233 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'user' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:33.995 CET: SSHD_[65928]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '185.145.252.26' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:34.080 CET: SSHD_[65928]: %SECURITY-SSHD-3-ERR_GENERAL : Failed to receive User authentication request
RP/0/RSP0/CPU0:Jul 2 16:06:38.111 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'guest' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:45.081 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'info' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:51.631 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'pi' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:52.832 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:58.477 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'ftpuser' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:06:59.751 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:07:04.120 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'vyatta' from '103.207.38.145' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:07:14.827 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:07:17.635 CET: SSHD_[65924]: %SECURITY-SSHD-3-ERR_GENERAL : Error in receiving key exchange packet
RP/0/RSP0/CPU0:Jul 2 16:07:30.088 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:07:37.995 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:07:59.525 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:08:04.341 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:08:09.238 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty1'
RP/0/RSP0/CPU0:Jul 2 16:08:17.307 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:08:30.976 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '116.31.116.24' on 'vty0'
RP/0/RSP0/CPU0:Jul 2 16:08:46.102 CET: SSHD_[65924]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
-------------------------------------------------

RP/0/RSP0/CPU0:Jul 3 15:50:02.640 CET: SSHD_[65924]: %SECURITY-SSHD-3-ERR_GENERAL : Failed in version exchange
RP/0/RSP0/CPU0:Jul 3 15:50:13.221 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '123.183.209.140' on 'vty0'
RP/0/RSP0/CPU0:Jul 3 15:50:19.940 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 3 15:50:25.095 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
RP/0/RSP0/CPU0:Jul 3 15:50:36.623 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.154' on 'vty0'
RP/0/RSP0/CPU0:Jul 3 15:50:59.907 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.218.198.151' on 'vty0'
RP/0/RSP0/CPU0:Jul 3 15:51:07.577 CET: SSHD_[65923]: %SECURITY-SSHD-4-INFO_FAILURE : Failed authentication attempt by user 'root' from '58.242.83.9' on 'vty0'
-

Can someone help me in this regard 

Regards

Abdurahman

7 Replies 7

smailmilak
Level 4
Level 4

Is this a new device or was it already in production?

It already in production for almost one year

I see a lot of different usernames in the logs.

Please restrict (with acl) ssh and telnet ports on the neighbor(s) device from unknown sources. 

It seems that you are under attack. 

ACL isn't enough, MPP is better. The reason to use MPP over an ACL is that MPP won't even open the socket on the 9K (won't take up a VTY line) unless the host / port is specifically allowed.

As for gaining access I am surprised console is not working, a few alternatives exist, on the standby RSP you can try gaining access to the console by typing <esc> + <k> + <s> + <h> + <enter>. You can also try this same step on the aux ports of both RSPs. Once you get to the shell you can type '/pkg/bin/exec -a' to get to the XR CLI.

Thanks,

Sam

Hi,

I hope that Abdurahman has managed to get access to his a9k.

MPP is great, but since access was not possible he needs to block the ssh/telnet requests from the internet on the IGW.

P.s. thanks for the hint how to gain access to standby RSP.

mivens
Level 1
Level 1

Configure management plane protection to only allow SSH access from your management network (and depending on your topology, only for traffic coming in on the correct interfaces).

http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r4-2/security/configuration/guide/b_syssec_cg42asr9k/b_syssec_cg42asr9k_chapter_0100.html

For completeness .also configure an ACL on the the vtys:

line template vty access-class ingress <vty acl>

Don't use telnet at all, deny it completely :)

For the time being now , I am not using Telnet ,Its already denied.

but I allow ssh with no restriction.

the problem is that I am not able to access the router even by console in order to configure the management plane protection.

As I said above ,the authentication seems to be accepted but it stop there and I cant see the running configuration.

Do you have any idea how I could regain the access to the router to make my configuration?