Unable to Telnet / SSH to a particular cisco switch

Hello,
I have an unusual issue that I just can't seem to track down. We have a Windows Server 2008 R2 box that is unable to telnet or ssh to one switch in our network.
Server IP: 10.0.0.74
Cisco Switch IP: 10.1.0.7
I am able to access all other switches/routers on the 10.1.0.x network, but not this one. I ping and tracert by ip address and name.
We have a number other servers on our network and they all can access this switch
Example:
a. 10.0.0.73 can telnet/ssh to 10.1.0.7
b. 10.0.0.72 can telnet/ssh to 10.1.0.7
c. 10.0.0.50 can telnet/ssh to 10.1.0.7
d. My workstation (10.0.250.213) can telnet/ssh to 10.1.0.7
If anyone can help with troubleshooting further, I would greatly appreciate it.

Thanks for the reply Philippe! Here is the route print
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.0.2 10.0.0.74 266
10.0.0.0 255.255.0.0 On-link 10.0.0.74 266
10.0.0.74 255.255.255.255 On-link 10.0.0.74 266
10.0.255.255 255.255.255.255 On-link 10.0.0.74 266
10.10.0.0 255.255.0.0 On-link 10.0.0.74 266
10.10.0.74 255.255.255.255 On-link 10.0.0.74 266
10.10.255.255 255.255.255.255 On-link 10.0.0.74 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.0.0.74 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.0.0.74 266
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 10.0.0.2 Default
===========================================================================
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
1 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
Firewall is disabled and there is no active antivirus. Im pretty sure port blocking is not the issue. I am able to ssh and telnet from this box to every other switch/router in our network.
This server has Solarwinds on it and tracks the health of our network (servers, routers, switches, ups, ect.). The only reason we noticed an issue is because it stopped backing up the config for this particular switch. All other switchs/routers
config is backed up to this server every morning at 2:00AM.
With solarwinds, this server is also able to communicate with this switch via snmp / icmp and ping.
Thanks again for the help!

Similar Messages

Cisco prime 2.2.0 "Telnet/SSH : Unreachable"

Hi,
I've installed the Cisco Prime 2.2.0 OVA (VMware) and ran discovery with a Credential Profile.
some of the device has discovered with complete state and some with Partial Collection Failure state.
when trying to edit the device (under network inventory) and verify credentials i'm getting the above error "Telnet/SSH : Unreachable", but when SSH from the Cisco Prime CLI with the same credentials all works just fine.
%SSH-5-SSH2_SESSION: SSH2 Session request from X.X.X.X (tty = 1) using crypto cipher '', hmac '' Failed
please help...
10x
Eyal

Hi Afroz,
All of my net devices use AAA for login.
I'm using credentials profile to discover my devices and some of them has discovered as they should and some of them are partialy discover with the Cisco Prime log it with CLI/ssh issue.
But when I'm SSH to the partialy discovered device via the Cisco Prime CLI with the same credentials as configured at the credential profile, I'm able to login with no issue.
Please note - while I'm editing the partialy discovered device and testing the credential via the Prime GUI, it display the error message "Telnet/SSH : Unreachable" - and the device log meeage is %SSH-5-SSH2_SESSION: SSH2 Session request from X.X.X.X (tty = 1) using crypto cipher '', hmac '' Failed.
What does it mean?
10x
Eyal

Unable to telnet and tftp to controller

hello experts!!!
5508 controller is at the headquarters which can be normally pinged, telnetted, http'd and tftp'ed....
at the remote site, controller can be pinged and http'ed but cannot be telnetted and tftp'ed.
there is a complete tracert from the remote site pc all the way to the controller.
from a switch at a remote site, the controller can be telnetted.
but from a pc on the remote site (which belongs to a remote site vlan), it is unable to telnet and tftp the controller.
all active components can be telnetted from the remote site, such as the core switches and routers at the headquearters, except the controller.
upgraded the controller code to 7.2.xxx in headquarters but still unable to telnet and tftp the controller from remote site.
is there any more settings on the controller for telnet and tftp?
what could be the problem why the controller is not available for telnet and tftp from the remote site?
thank you, experts, in advance for your replies!!!

Hello, Leo!
See output of the command:
(Cisco Controller) >show network summary
RF-Network Name............................. GID2012
Web Mode.................................... Enable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode Cipher-Option SSLv2......... Enable
OCSP........................................ Disabled
OCSP responder URL..........................
Secure Shell (ssh).......................... Enable
Telnet...................................... Enable
Ethernet Multicast Forwarding............... Disable
Ethernet Broadcast Forwarding............... Disable
AP Multicast/Broadcast Mode................. Unicast
IGMP snooping............................... Disabled
IGMP timeout................................ 60 seconds
IGMP Query Interval......................... 20 seconds
MLD snooping................................ Disabled
MLD timeout................................. 60 seconds
MLD query interval.......................... 20 seconds
User Idle Timeout........................... 28800 seconds
ARP Idle Timeout............................ 300 seconds
Cisco AP Default Master..................... Enabled
--More-- or (q)uit
AP Join Priority............................ Disable
Mgmt Via Wireless Interface................. Enable
Mgmt Via Dynamic Interface.................. Enable
Bridge MAC filter Config.................... Enable
Bridge Security Mode........................ EAP
Mesh Full Sector DFS........................ Enable
AP Fallback ................................ Enable
Web Auth Redirect Ports .................... 80
Web Auth Proxy Redirect ................... Disable
Web Auth Captive-Bypass .................. Disable
Web Auth Secure Web ....................... Enable
Fast SSID Change ........................... Disabled
AP Discovery - NAT IP Only ................. Enabled
IP/MAC Addr Binding Check .................. Enabled
CCX-lite status ............................ Disable
oeap-600 dual-rlan-ports ................... Disable
oeap-600 local-network ..................... Enable

Can't ping, telnet, SSH or find APs in ARP, but associated to WLC & has clients

Hi All,
I have an interesting problem. I have a Cisco 2504 WLC, and six Access Points that are associated to it. I can reach 4 of the access points, which are connected to Cisco 300 POE switches, but the other 2 I cannot ping, telnet, SSH or find in the ARP table on the network. However, they are both associated to the WLC and as far as I can tell, they have clients associated to them. If I reboot them from the WLC, they find their way back to the correct WLC, and the WLC sees them in CDP, but I still can't access them in any way.
The two problem APs appear to be connected to ports 3 & 4 on the WLC, which are the POE ports. I read some documentation that says that those ports don't support Access Points but basically that you can still connect them and have it work, but don't expect any help from Cisco if you run into problems. I've confirmed that POE is being supplied in the port configs, and I have other sites with WLC's that are configured identically with APs on ports 3 & 4 that are up and not having any issues.
Wondering if anyone has had similar issues and if so, can you shed any light on this strange behavior?
Thanks.

please
https://supportforums.cisco.com/discussion/11288621/2500-wlc-attach-ap

Unable to Telnet...............

Posted by: vatsey.sharad - Engineer, HCL Comnet
Jun 6, 2008, 2:09am PST
Hi,
I have two IP's Configured on my Cisco 2800. 1.1.1.1 - Loopback and 2.2.2.2 on Fast Ethernet. Both IP's are pingable across the WAN. And telnet to loopback IP is working fine. However I am unable to telnet to Fast Ethernet IP. The error message while trying to telnet to Fast Ethernet IP is: "Could not open connection to the host, on port 23: Connect failed". I tried to debug telnet on the router. The Debug output for unsuccessful telnet is as follows:
Telnet194: recv SB NAWS 139 24
However for a successful telnet session, the output is:
Telnet195: 1 1 251 1
TCP195: Telnet sent WILL ECHO (1)
Telnet195: 2 2 251 3
TCP195: Telnet sent WILL SUPPRESS-GA (3)
Telnet195: 80000 80000 253 24
TCP195: Telnet sent DO TTY-TYPE (24)
Telnet195: 10000000 10000000 253 31
TCP195: Telnet sent DO WINDOW-SIZE (31)
TCP195: Telnet received DO ECHO (1)
TCP195: Telnet received DO SUPPRESS-GA (3)
TCP195: Telnet received WILL TTY-TYPE (24)
Telnet195: Sent SB 24 1
TCP195: Telnet received WILL WINDOW-SIZE (31)
Telnet195: recv SB NAWS 110 52
Telnet195: recv SB 24 0 ANSI
There are no ACL's or firewalls involved in the picture.

Sharad
How many forums did you post this question in? I have already found it in 2 other forums.
HTH
Rick

Unable to telnet to LINUX desktop

I've installed Linux 2.6.9-42.0.0.0.1 ( downloaded from oracle's website) and I'm unable to telnet to this machine from my laptop.
I get this error
C:\Documents and Settings\Administrator>telnet oragrid
Connecting To oragrid...Could not open connection to the host, on port 23: Connect failed
This is my first linux trial so I guess you need to tell me from scratch regarding starting the telnet.
Thanks
Mukul

Mukul,
Search this forum for "telnet". You'll see threads such as this one:
Re: FTP & TELNET in Enterprise Linux
Bottom line, I recommend you use ssh rather than telnet. If you're connecting from Windows, download Putty, for example.
Sergio

Transport input telnet ssh help

Hello,
I had two questions about remotely login to switch or router :
1. What is the default setting on switch or router to accept remote login (i.e., telnet or ssh)
2. If i configure...TRANSPORT INPUT TELNET SSH... which one is default and accepted first by switch or router. I mean I know that it will accept both but I want to know that If I configure both to accept then which one has the first priority or by default which one is accepted first, tenet or ssh.
Thanks

1) Default settings on all VTYs are "transport input all" --> all the supported protocols, that includes both telnet and ssh.
2) There is no priority level on which one is accepted first. Basically it just listens on both protocols (telnet - tcp/23 and ssh - tcp/22) for remote management.
Here is the command description for your reference:
http://www.cisco.com/en/US/docs/ios/termserv/command/reference/tsv_s1.html#wp1069219
Hope that helps.

Unable to telnet SLM224G2

hi.
i am able to ping my SLM224G2 switch but unable to telnet the switch.
pls. help me out.
Jitendra

I am not sure if the SLM224G2 if you can telnet the unit but if it does have that option usually you might have some enabled firewalls in the PC that is why you are unable telnet the unit. I tried to further look at either the user guide or datasheet for the SLM224G (anyway the SLM224G2 should belong to that family) and it doesn’t say that it has a telnet capability. I am honestly not familiar with this switch but I know the SRW series has telnet capabilities. I suggest try contacting CISCO tech support to report about this problem and seek their opinion about it.

Telnet/SSH access

I am unable to telnet or ssh to a router from internet (LAN works fine). I see following in debug logs on the router
*Jun 7 12:19:22: TCP0: state was LISTEN -> SYNRCVD [22 -> <Outside IP removed>(59121)]
*Jun 7 12:19:22: TCP: tcb 85455EE8 connection to <Outside IP removed>:59121, peer MSS 1260, MSS is 516
*Jun 7 12:19:22: TCP: sending SYN, seq 1340633744, ack 114092318
*Jun 7 12:19:22: TCP0: Connection to <Outside IP removed>:59121, advertising MSS 536
*Jun 7 12:19:22: TCP0: RST received, Closing connection
*Jun 7 12:19:22: TCP0: state was SYNRCVD -> CLOSED [22 -> <Outside IP removed>(59121)]
*Jun 7 12:19:22: tcp0: T CLOSED <Outside IP removed>:59121 <Telnet Host IP removed>:22 early close
*Jun 7 12:19:22: TCB 0x85455EE8 destroyed
Is it something to do with mss?
Any help would be greatly appreciated.

Hi sajidilyas,
Have you solved the issue?
In my case, It's seems caused by asymetric routing. CMIIW
I'm still waiting for next testing.

CSS11501 - Unable to Telnet to VRRP backup interface IP

Hi,
I have 2 units of Cisco CSS11501 which configured running on VRRP active/standby on 2 different VLAN (Circuit). When unit 1 is master unit, I am able to telnet to its circuit IP address, but unable to telnet to any circuit IP of backup unit.
Active unit configuration:
!************************** CIRCUIT **************************
circuit VLAN145
ip address 172.19.145.182 255.255.255.0
    ip virtual-router 1 priority 101
    ip redundant-vip 1 172.19.145.184
    ip redundant-interface 1 172.19.145.183
circuit VLAN550
ip address 192.168.50.18 255.255.255.0
    ip virtual-router 2 priority 101
    ip redundant-vip 2 192.168.50.20
    ip redundant-interface 2 192.168.50.19
!*************************** OWNER ***************************
owner ***
content ***
    vip address 172.19.145.184
    port 80
    protocol tcp
    add service ***
    active
!*************************** GROUP ***************************
group ***
vip address 192.168.50.20
active
Backup unit configuration:
!************************** CIRCUIT **************************
circuit VLAN145
ip address 172.19.145.183 255.255.255.0
    ip virtual-router 1 priority 90
    ip redundant-interface 1 172.19.145.182
    ip redundant-vip 1 172.19.145.184
circuit VLAN550
ip address 192.168.50.19 255.255.255.0
    ip virtual-router 2 priority 90
    ip redundant-vip 2 192.168.50.20
    ip redundant-interface 2 192.168.50.18
!*************************** OWNER ***************************
owner ***
content ***
    vip address 172.19.145.184
    port 80
    protocol tcp
    add service ***
    active
!*************************** GROUP ***************************
group ***
vip address 192.168.50.20
active
Please help!!
Regards,
Danny Lim

Hi Marko,
That means I could not to configure redundant-interface as I have redundant-vip configured already?
Actually the topology is:
VLAN550 is connecting to server farm
VLAN145 is where user sitting
my current config :
circuit VLAN145
ip address 172.19.145.182 255.255.255.0
    ip virtual-router 1 priority 101
    ip redundant-vip 1 172.19.145.184
    ip redundant-interface 1 172.19.145.183
    ip critical-service 1 PING_DEFAULT_GATEWAY
circuit VLAN550
ip address 192.168.50.18 255.255.255.0
    ip virtual-router 2 priority 101
    ip redundant-vip 2 192.168.50.20
    ip redundant-interface 2 192.168.50.19
    ip critical-service 2 PING_DEFAULT_GATEWAY
!*************************** OWNER ***************************
owner HLRLDAP
content VIP_LDAP_16611
    vip address 172.19.145.184
    port 16611
    protocol tcp
    add service KPG-HV30-3
    add service KPG-HV30-6
    active
!*************************** GROUP ***************************
group Redundant_Server
vip address 192.168.50.20
active
So, I should have change my config like this:
CSS1
circuit VLAN145
ip address 172.19.145.182 255.255.255.0
    ip virtual-router 1 priority 101
    ip redundant-vip 1 172.19.145.184
    ip redundant-interface 1 172.19.145.181
    ip critical-service 1 PING_DEFAULT_GATEWAY
circuit VLAN550
ip address 192.168.50.18 255.255.255.0
    ip virtual-router 2 priority 101
    ip redundant-interface 2 192.168.50.20
    ip critical-service 2 PING_DEFAULT_GATEWAY
CSS2
!************************** CIRCUIT **************************
circuit VLAN145
ip address 172.19.145.183 255.255.255.0
    ip virtual-router 1 priority 90
    ip redundant-interface 1 172.19.145.181
    ip redundant-vip 1 172.19.145.184
    ip critical-service 1 PING_DEFAULT_GATEWAY
circuit VLAN550
ip address 192.168.50.19 255.255.255.0
    ip virtual-router 2 priority 90
    ip redundant-interface 2 192.168.50.20
    ip critical-service 2 PING_DEFAULT_GATEWAY

Reverse SSH not working for Cisco 3750.Plz help.

Hi,
I have configured the reverse ssh mentioned on the cisco document:http://www.cisco.com/en/US/docs/ios/12_3t/12_3t11/feature/guide/gt_rssh.html#wp1051457.
But now I am running into the issue that When I issue command ssh -l alex:rotary1 192.38.6.8 from the cli of the router I’m presented with a password prompt.
I enter my password and get connected. However at this point when I type, for example, the atdt command I don’t see any output displayed.
So I tried typing command atdt <tel no.> and at the same time ran a debug modem on a separate session. It was from the separate session I could see the call been made to the remote device and connected successfully. However almost immediately the modem debug displays message 0236596: Dec 7 2010 12:18:18.236 GMT: TTY69: cleanup pending. Delaying DTR. At no point do I see output displayed on the session where I connected to the modem.
When using telnet to connect, i.e using the same modem and the same remote device, we have had no problems it is just with SSH.
Any suggestion on this will be highly appriciated.
Thanks
Alex.

Philip,
I first thank you for coming forward to help me on this.
I use the 30DM(Digital Modem) Card on the router. I have configured on of this modem on the PRI card(1/18) to make outbound calls. We use this dailup to cyclades the devices located on our remote office. Hence we loose the main internet connectivity we use this option as a backup.
Show ver:Cisco IOS Software, 3700 Software (C3725-ADVSECURITYK9-M), Version 12.3(11)T5
ine con 0
transport output none
line 72 92
modem InOut
modem autoconfigure type mica
transport input all
transport output all
autoselect during-login
autoselect ppp
line 93
absolute-timeout 60
modem InOut
modem autoconfigure type mica
rotary 1
no exec
transport input ssh
transport output none
line aux 0
no exec
transport output none
line vty 0 4
logging synchronous
transport input ssh
transport output ssh
Please let me know is this a bug or anything else. AS the same setup works fine when I use TElnet rather than ssh.
Thanks in advance.
REgards
Alex.

LAN Switches cannot be accessed by Telnet, SSH or console in native vlan

Hi to all of you:
I do have a question about tagging the native vlan.
In our network we do have about 90 L2 and L3 switches, 2950 the oldest, 2960, 2960S, 3560 PoE, 3750 and 4503E, and we are running VTP, and 43 vlans within the entire network.
our Native VLAN is still vlan 1, and there are many corporative applications running in this vlan.
We have upgraded the IOS for the switches to the latest IOS version about 6 months ago, and after that we started to have issues on the switches, related to accessing the switch, either by telnet, ssh, or even console. However, the switch is still working fine, I mean, doing all bridging and switching traffic.
I have to reset or reload (power cycle) if I want to access the switch.
I have read that having the native vlan can be a problem.
Could you please let me know if you have gone through this problem?
Thanks in advance for your help.
Javier F. Berthin H.

Hi Karhtick:
I guess you have the best answer, you suggested the memory command and I am attaching you as result.
Next step should be to downgrade the IOS?, because we did the upgrade just in order to have the latest IOS published by Cisco.
If you need the config please let me know, for complementary comments.
Thanks for your help.
Javier
Core_Toldos#
Core_Toldos#
Core_Toldos#sh processes memory sorted
Processor Pool Total:   57114592 Used:   42061488 Free:   15053104
      I/O Pool Total:   12582912 Used:    9397428 Free:    3185484
Driver te Pool Total:    1048576 Used:         40 Free:    1048536
PID TTY Allocated      Freed    Holding    Getbufs    Retbufs Process
   0   0   56706116   14325484   38372056          0          0 *Init*
197   0    4506712    2363500    1463652          0          0 Auth Manager
   0   0          0          0    1443720          0          0 *MallocLite*
   0   0 577244636 370831296     916016   12457311    3203234 *Dead*
236   0     532808      46152     507068          0          0 IP ARP Adjacency
303   0    1335768     890528     450448          0          0 ADJ resolve proc
230   0   27640244      15996     378344      10152          0 CDP Protocol
77   0     368260   14413456     377820          0          0 EEM ED ND
102   0     385848        232     362236          0          0 HLFM address lea
404   0    3397428    3069392     334928          0          0 hulc running con
192   0     307492      21604     294808          0          0 HL2MCM
193   0     356552      70624     294744          0          0 HL2MCM
357   0     265100          0     275260     100548          0 EEM ED Syslog
365   0 126849404   86726456     255248          0          0 EEM Server
87   0     569060     274864     244984          0          0 Stack Mgr Notifi
203   0     753032     492440     164316          0          0 DTP Protocol
201   0     737920     526656     159424          0          0 802.1x switch
13   0 505129716 504972016     156620          0          0 ARP Input
Core_Toldos#

Prime 4.2 Telnet/ SSH Connections to Switches

Hi everybody,
I have a problem with LMS 4.2 and use Telnet/ SSH tool to open network devices.
If I start the tool telnet/ssh, always starts a telnet session and no ssh session.
But telnet is disabled on all devices in my network. Can I change something to open automatically a ssh session with putty?
regards Bjoern

Hi Bjoern,
I am assuming you refer to the Device Center > Tools > Telnet/SSH option.
The problem is not on LMS actually. What happens is that in the background, a telnet:// is being called.
What will happen is that your system will launch whatever application has been assigned to the telnet protocol, typically the Windows CMD, which will open a telnet session automatically.
In order to change this to use Putty for example, which would allow you to change to SSH connectivity (manually though) you can do the following:
1) BACKUP YOUR REGISTRY.
Go to Start > Run > Regedit > File > Export.
2) Locate the following key:
HKEY_CLASSES_ROOT > Telnet > shell > Open > command > (default)
3) Modify the key value to point to the location of your "putty.exe" file (make sure to include the double quotes).
Default value:
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\url.dll",TelnetProtocolHandler %l
New value (will open putty automatically to the selected IP):
"D:\Tools\putty.exe" %l
New value (will open putty normally, you will need to type the IP but can change the connection protocol/port if desired):
"D:\Tools\putty.exe"
This should make your system open Putty for any "telnet://" links, including the Telnet/SSH link in the Tools section of Device Center.
Best regards,
Luis
Message was edited by: Luis Jimenez
Message was edited by: Luis Jimenez

Telnet/SSH as root not working

I have freshly installed Solaris10 U5 through network installation method.
After installation is over, i am not able to login as "root" over the network through Telnet/SSH
What file we need to edit to disable this rule ?

Telnet is disabled by default.
So is root login via SSH.
To enable root login, edit /etc/ssh/sshd_config and change the line:
PermitRootLogin no
to
PermitRootLogin yes
Then restart sshd.
if you really want to enable telnet, use the svcadmin command.

I am unable to telnet NAT IP from outside but could ping at the same time. Please help. Here is the router configuration.

Building configuration...
Current configuration : 3351 bytes
! No configuration change since last restart
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
boot-start-marker
boot-end-marker
logging buffered 51200 warnings
no aaa new-model
memory-size iomem 10
crypto pki token default removal timeout 0
crypto pki trustpoint TP-self-signed-1515919628
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1515919628
revocation-check none
rsakeypair TP-self-signed-1515919628
crypto pki certificate chain TP-self-signed-1515919628
certificate self-signed 01
ip source-route
ip dhcp excluded-address 10.10.10.1
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.248
default-router 10.10.10.1
lease 0 2
ip cef
no ip domain lookup
ip domain name yourdomain.com
no ipv6 cef
license udi pid CISCO881-K9 sn FCZ1639C2EX
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
ip address 10.1.1.245 255.255.255.0
ip access-group KARIDGE in
ip access-group KARIDGE out
duplex auto
speed auto
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$
ip address 100.241.190.125 255.255.255.240
ip tcp adjust-mss 1452
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip route 0.0.0.0 0.0.0.0 100.241.190.113
ip access-list extended KARIDGE
permit ip host 10.1.1.6 any
permit ip any host 10.1.1.6
access-list 23 permit 10.10.10.0 0.0.0.7
no cdp run
line con 0
login local
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
end

Can you connect throght SSH? Which is the error message that you see?
Looking at your configuration file I don´t see the lines "enable secret" neither "enable password". If you don´t define them you can´t connect remotely to any device.

Unable to Telnet / SSH to a particular cisco switch

Similar Messages

Maybe you are looking for