cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4989
Views
15
Helpful
7
Replies

Unable to enable SSH on an ASR9000

3alee
Level 1
Level 1

Hello

I got the following when trying to configure SSH on an ASR9K:

RP/0/RSP0/CPU0:hk4-vipasr1(config)#ssh ?

                                     ^

% Invalid input detected at '^' marker.

RP/0/RSP0/CPU0:hk4-vipasr1(config)#do sh install active

  Node 0/RSP0/CPU0 [RP] [SDR: Owner]

    Boot Device: disk0:

    Boot Image: /disk0/asr9k-os-mbi-4.1.0/mbiasr9k-rp.vm

    Active Packages:

      disk0:asr9k-mini-p-4.1.0

  Node 0/0/CPU0 [LC] [SDR: Owner]

    Boot Device: mem:

    Boot Image: /disk0/asr9k-os-mbi-4.1.0/lc/mbiasr9k-lc.vm

    Active Packages:

      disk0:asr9k-mini-p-4.1.0

RP/0/RSP0/CPU0:hk4-vipasr1(config)#do sh install inactive

  Node 0/RSP0/CPU0 [RP] [SDR: Owner]

    Boot Device: disk0:

    Inactive Packages:

      disk0:asr9k-p-4.1.0.CSCto96804-1.0.0

      disk0:asr9k-p-4.1.0.CSCto95435-1.0.0

      disk0:asr9k-doc-p-4.1.0

      disk0:asr9k-mini-p-4.0.1

      disk0:asr9k-optic-4.1.0

      disk0:asr9k-video-p-4.1.0

      disk0:asr9k-mpls-p-4.1.0

      disk0:asr9k-mgbl-p-4.1.0

      disk0:asr9k-mcast-p-4.1.0

      disk0:asr9k-p-4.1.0.CSCto94570-1.0.0

  Node 0/0/CPU0 [LC] [SDR: Owner]

    Boot Device: mem:

    Inactive Packages:

      disk0:asr9k-p-4.1.0.CSCto96804-1.0.0

      disk0:asr9k-p-4.1.0.CSCto95435-1.0.0

      disk0:asr9k-mini-p-4.0.1

      disk0:asr9k-optic-4.1.0

      disk0:asr9k-video-p-4.1.0

      disk0:asr9k-mpls-p-4.1.0

      disk0:asr9k-mcast-p-4.1.0

      disk0:asr9k-p-4.1.0.CSCto94570-1.0.0

RP/0/RSP0/CPU0:hk4-vipasr1(config)#do sh ve

Thu Jul  7 17:01:34.426 HKT

Cisco IOS XR Software, Version 4.1.0[Default]

Copyright (c) 2011 by Cisco Systems, Inc.

ROM: System Bootstrap, Version 1.05(20101118:025914) [ASR9K ROMMON], 

hk4-vipasr1 uptime is 36 minutes

System image file is "bootflash:disk0/asr9k-os-mbi-4.1.0/mbiasr9k-rp.vm"

cisco ASR9K Series (MPC8641D) processor with 4194304K bytes of memory.

MPC8641D processor at 1333MHz, Revision 2.2

ASR-9006 AC Chassis

2 Management Ethernet

40 GigabitEthernet

219k bytes of non-volatile configuration memory.

1000M bytes of compact flash card.

68114M bytes of hard disk.

1605616k bytes of disk0: (Sector size 512 bytes).

1605616k bytes of disk1: (Sector size 512 bytes).

Configuration register on node 0/RSP0/CPU0 is 0x2102

Boot device on node 0/RSP0/CPU0 is disk0:

Package active on node 0/RSP0/CPU0:

iosxr-ce, V 4.1.0[00], Cisco Systems, at disk0:iosxr-ce-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-fwding, V 4.1.0[00], Cisco Systems, at disk0:asr9k-fwding-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-cpp, V 4.1.0[00], Cisco Systems, at disk0:asr9k-cpp-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-ce, V 4.1.0[00], Cisco Systems, at disk0:asr9k-ce-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-scfclient, V 4.1.0[00], Cisco Systems, at disk0:asr9k-scfclient-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-routing, V 4.1.0[00], Cisco Systems, at disk0:iosxr-routing-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-infra, V 4.1.0[00], Cisco Systems, at disk0:iosxr-infra-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-fwding, V 4.1.0[00], Cisco Systems, at disk0:iosxr-fwding-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-diags, V 4.1.0[00], Cisco Systems, at disk0:iosxr-diags-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-fpd, V 4.1.0[00], Cisco Systems, at disk0:asr9k-fpd-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-diags-supp, V 4.1.0[00], Cisco Systems, at disk0:asr9k-diags-supp-4.1.0

    Built on Sun Apr 24 20:50:52 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-base, V 4.1.0[00], Cisco Systems, at disk0:asr9k-base-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-os-mbi, V 4.1.0[00], Cisco Systems, at disk0:asr9k-os-mbi-4.1.0

    Built on Sun Apr 24 20:53:10 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

Boot device on node 0/0/CPU0 is mem:

Package active on node 0/0/CPU0:

iosxr-ce, V 4.1.0[00], Cisco Systems, at disk0:iosxr-ce-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-fwding, V 4.1.0[00], Cisco Systems, at disk0:asr9k-fwding-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-cpp, V 4.1.0[00], Cisco Systems, at disk0:asr9k-cpp-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-ce, V 4.1.0[00], Cisco Systems, at disk0:asr9k-ce-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-scfclient, V 4.1.0[00], Cisco Systems, at disk0:asr9k-scfclient-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-routing, V 4.1.0[00], Cisco Systems, at disk0:iosxr-routing-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-infra, V 4.1.0[00], Cisco Systems, at disk0:iosxr-infra-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-fwding, V 4.1.0[00], Cisco Systems, at disk0:iosxr-fwding-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

iosxr-diags, V 4.1.0[00], Cisco Systems, at disk0:iosxr-diags-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-diags-supp, V 4.1.0[00], Cisco Systems, at disk0:asr9k-diags-supp-4.1.0

    Built on Sun Apr 24 20:50:52 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-base, V 4.1.0[00], Cisco Systems, at disk0:asr9k-base-4.1.0

    Built on Sun Apr 24 20:50:53 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

asr9k-os-mbi, V 4.1.0[00], Cisco Systems, at disk0:asr9k-os-mbi-4.1.0

    Built on Sun Apr 24 20:53:10 HKT 2011

    By sjc-lds-511 in /auto/srcarchive5/production/4.1.0/asr9k/workspace for pie

Is there something I need to activate?

Pls help.  Thanks!

7 Replies 7

Richard Burts
Hall of Fame
Hall of Fame

What happens if you try ip ssh ? instead of just ssh ?

In term of what you might need to activate, it is generally required to generate RSA keys to activate SSH.

HTH

Rick

HTH

Rick

Hello

I solved it today by adding and activating the PIE "asr9k-k9sec-p.pie-4.1.0".  After activation, the relevant commands for SSH appear.

Thanks.

Thanks for posting back to the thread and telling us that you have solved it and how you solved it. It makes the forum more useful when people can read about a problem and can find the identification and solution to the problem. You have contributed to this process. I give +5 for your post.

HTH

Rick

HTH

Rick

Thank you. I  have 2 x new ASR9001 and  could not   enable   SSH.

I kept getting the following errors :

 

RP/0/RSP0/CPU0:ios(config)#ssh ?

                             ^

% Invalid input detected at '^' marker.

RP/0/RSP0/CPU0:ios(config)#ssh timeout 60

                             ^

% Invalid input detected at '^' marker.

RP/0/RSP0/CPU0:ios(config)# ssh timeout 60

                              ^

% Invalid input detected at '^' marker.

RP/0/RSP0/CPU0:ios(config)#ssh server v2

                             ^

% Invalid input detected at '^' marker.

 

I will  try  and  reconfigure them  as per the fix  in this post and update.

 Hi,

 

Not sure if your issue got resolved. 

If not, please check if you have installed k9sec pie on your router. Without that ssh config cannot be enabled.

 

Regards,

Apoorva.

Thank you. I will check and verify then proceed to configure SSH.

Please check if you have k9sec package.
If you have installed, please share. Show install active summary