Help setting up ssh (putty) in 2821 routers

I am trying to use ssh for the the 2821 routers. They have IOS 12.3(11)(k9) on it.
So, these are the steps that I do:I add a new user name with no AAA model. And I give the user name privilege level 15(I also gave it 0, but nothing). The routers already have a hostname, and I add the domain-name. So After these commands, I create the key, using crypto key generate command.
So after this, I go into putty, type the ip addres, set-up for 3des encryption.
I am able to make a connection to the router, asking me for the login name and password, but when I typed the username and password, it response, "Access Denied"
any comments or anything will help. Thanks

Try using SSH Version 1. Most of the "older" Cisco hardware / IOS can only connect with Version 1.
SSH1 has been broken, but it's still much more secure than Telnet.
Good Luck
Scott

Similar Messages

Help setting up SSH Server to watch Sky Player

Hi all
This is my first post here but been a Mac lover for many years. I have just got access Sky Player and I spend a lot of time outside the UK and of course, Sky Player doesn't work outside of the UK. I have read I need to set up a home server with SSH enabled with a SOCKS 5 Proxy set up so I can route into that while abroad with my MacBook Pro. I have a spare PowerBook G4 running Leopard I can use, but I have never done this before. Can anyone here tell me what to do on the PowerBook G4 at home to set up SSH and SOCKS 5 Proxy, then what to do on my MacBook Pro while abroad to watch Sky Player?
I would really appreciate any help with this.
Thanks
Rich

I'm assuming that either your Sky Player allows the use of a SOCKS5 proxy server, or this is web server based.
This is done on the Mac in the UK:
You should get a free No-IP.com or DynDNS.org dynamic DNS name, and then run the dynamic DNS update client on the UK Mac. This will allow you to find your UK Mac even if your ISP changes your IP address.
You need to enable your UK Mac's System Preferences -> Sharing -> Remote Login.
You need to configure your UK home router so it forwards port 22 from the public internet side to port 22 on the UK Mac.
Depending on your home router, you may need to specify a fixed private IP address, and to do that you need to configure the UK Mac System Preferences -> Network -> Advanced -> TCP/IP for "DHCP Manual IP Address". The actual address should be in the in the IP address range handled by the router; 192.168.1.201 or 10.0.1.201 or similar. Look at the IP addresses being assigned by your router and mirror the first 3 numbers, then pick a number like 201, but it could be another value between 2 and 253, but I like 201 as it tends not to be in the way of anything.
You should test this by going to a local WiFi hot spot and trying to ssh into your UK Mac. Better to test before you are on the road.
This is done on the Mac that is away from home:
Using Applications -> Utilities -> Terminal
ssh -D 12345 [email protected]
Now set System Preferences -> Network -> Advanced -> Proxy
[X] SOCKS Proxy
SOCKS Proxy server: localhost : 12345
Where the 12345 is the value specified by the *-D 12345* option in the ssh command. Feel free to choose a different port number, but I would suggest something that is 5 digits long and less than 65534, so you are less likely to accidentially use another protocol's known port.
If your Sky Player does not use the System Preferences Network Proxy, then you need to configure the Sky Player proxy config with similar information.

I need help setting this up. 2 wireless routers off one internet connection

I have a cable internet connection. I want to connect a netgear wireless router and then plug in a 80ft ethernet cable attached to a Linksys wireless router. Can the Linksys router be used as an access point? Or basically I want to use both wireless routers. I need help putting this together.

Yes you can do that, here are the steps on hot to do it.The router A or your netgear must be configured like router A on the illustration on this link ^_^
Click Here
Many thanks,
Akira893
wE dOnt gEt mAd! wE gEt evEn!
^_^

Help for basic VOIP function on 2821

Hi,
I'm new to VOIP. Sorry for this simple question.
We have two Cisco 2821 routers, two 7960G IP phones.
Each 2821 router has PVDM2-8 DSP module, HWIC-4ESW 4 port swtiching card, IOS 12.4(22)T3.
No any Call Manager software is loaded.
Can anyone point me to a sample configuration/how-to so I can make phone call from Router A to Router B?
Something as below:
Phone A <----> Router A <---- internal IP network ----> Router B <------> Phone B
Please note we don't have Call Manager software and we don't need fancy phone call features.
Thank you very much!
-Andrew

You need two analog phones. The VOIP phones you have 7960G will not work. They are dumm terminals. They need something to tell them what to do. A call agent (CUCM, CCM,) or any other call agent that can control cisco VOIP phones eg asterics.
When you do get 2 analog phones configure voip and pots dial peers
example
Configure this on both routers with the IP pointing to each other
dial-peer voice 10 voip
destination-pattern 5678 --No the analog will send to the other sides fxs port to ring the analog phone
session target ipv4:10.10.10.1 ------ ip address of the other router.
dial-peer voice 11 pots
destination-pattern 234 --- the number that will ring the phone plugged here.
port 1/0 -------fxs port where your analog phone is plugged.
Dial away.
You might find ths url helpful.
http://www.cisco.com/en/US/tech/tk652/tk698/technologies_tech_note09186a00800e00d0.shtml

The VTY sessions are set for SSH, is telnet still open?

I'm in the process of enabling SSH on all of my routers, switches and firewalls. After upgrading the IOS to one that supports SSH, generating the crypto key and then setting all of the VTY sessions to SSH only, my security team informs me that telnet is still vulnerable to IP spoofing. They can demonstrate that when they launch a telnet session to one of my routers, the telnet session will pause for maybe 2 seconds before receivign the message that the session was terminated by the router. They claim this indicates that the router is responding to the telnet session and before the actual disconnect is forced they could IP spoof the box and cause a DOS.
I say boulderdash but without any proof I am forced to create a bunch of ACL's to specifically deny telnet. Here is an example of my VTY's:
line vty 0 4
access-class 23 in
exec-timeout 30 0
password 7 xxxxxxxxxxxxx
logging synchronous
transport preferred ssh
transport input ssh
transport output ssh
*The access list here is limiting access from a certain internal set of IP's.
Any thoughts?

Marcos,
Thank you for your time on this. I believe I have found and corrected my issue. In my first post I showed what the vty 0 4 sessions were set as. What I failed to show was that the "vty 5 15" sessions were only set to "no exec". So what was happening is that when I would telnet to the router, the session attempt would either walk down the list of VTY sessions looking for an open port or the router just bypassed the ones that were set for SSH and tried the first VTY port that was set for no exec. This would allow for the telnet session to attempt to open but because the router was not allowing access to the command line interpreter, the router would reject the session attempt.
To correct this I simply set up all of my VTY sessions the same way, transport SSH in & transport SSH out. The next attempt closed the telnet session immediately. I still maintain there is no need for additional access-lists as I'm trying to keep my processor's free from any additional load to allow them to process the payload traffic as efficiently as possible.
If anyone has any best practices they would care to leave here, I would be interested.
Sam

Setting up SSH on a 3845 router?

Greetings everyone!
Just curious, how does one set up SSH on a cisco 3845 router? Specifically, how does one generate the RSA keys?
It seems to be missing the "generate" subcommand for crypto. When I type crypto key the only sub-commands are lock and unlock. I'm unfamiliar with this and don't want to mess around too much since it's a production box.
I'm running c3845-spservicesk9-mz.124-11.T2.bin so I should have the ability, yes? Any guidance would be appreciated. I really would prefer not to use telnet.

you have k9 image , it should support crypto commands, are you sure you were at the configuration mode?
try again.., here is a link for setting up ssh in IOS.
http://www.cisco.com/en/US/tech/tk583/tk617/technologies_tech_note09186a00800949e2.shtml
way to do it is open two telnet sessions to the router, in one session be in the enable mode and leave the session opened. On the other telnet session work with the SSH configuration implementation. When finished do not save the config , exit the session and open a new session using ssh to ensure you can connect and login to the router via ssh... if for any reason fails you still have the other telnet session opened to undo the ssh changes or correct them.
also for making sure your telnet sessions do not time out while working with configs permit yourself more time by entering exec-time out 60 <-- one hour for your vty lines.
line vty 0 4
exec-timeout 60
you can also do the complete ssh implementation via console port as well.
Regards
PLS rate any helpful posts if it helps

Help setting up BTinternet email with Apple Mail

Hello everyone,
I need help setting up a btinternet email account with Apple's Mail sofware. I am setting it up on behalf of my aunt and uncles new macbook pro so I hope i get some solutions quick because Im leaving their place by the end of the weekend and I would love to have their email setup and teach them how to use it.
They have 2 btinternet email accounts, the first one they use alot as its their main email account which is currently setup on MS Outlook on their old computer. The secound one they use rarely and its not setup on MS Outlook.
Heres the problem, when I setup their main email account with apple mail, I have no problem creating the account however once created the inbox is empty - it does not load previous emails. It can send emails fine, if i send an email to the account using my personal email it will receive it but when I switch off the computer and switch it back on the mail box is empty. So I checked the email account by going to yahoo.co.uk and signing in - again even on the web page the mail box is empty.
I then setup the second btinternet email account on Apple Mail shockingly this works perfectly all the old emails got loaded up in mail. So how do I do this for the main account, I know the difference is Outlook mail but I rather not delete that because if it doesnt work then they would lose all their old emails.
Please help
Thanks in advance
PS: ive setup my hotmail and yahoo accounts and they all work fine by the way

Please guys give me something or any random ideas u may have. im running out of time.

HOW TO?: Need help setting up 3 different iCloud accounts for my kids (so each has own iMessanger)using same Apple ID (mine) ....they don't have their own separate email addresses to work from...how do I do this?

Need help setting up 3 different iCloud accounts for my kids (so each has own iMessanger)using same Apple ID (mine) ....they don't have their own separate email addresses to work from...how do I do this?

Any devices connected to the same icloud account can sync all the data on that account. For this reason an icloud account is really for a single user.
On a mac, if each user has their own account, then the itunes for that mac account should be set up to connect to that user's icloud account (System preferences>icloud).

Help setting up my new IPod Touch on iTunes on windows 7 64bit

Hello there,
I need help setting up my new IPod Touch to my Itunes 10 application on a PC running windows 7 64bit. I have watched the tutorial on how to do it but what the tutorial says it is supposed to do is not what is happenning for me:
1. In the tutorial it tells you to connect your ipod to your computer, then, (if it is for the first time) when the ipod appears and is selected, a window will come up allowing you to name your ipod, and begin selecting the options you wish to use.
I did as instructed but quickly came against some technical issues.
My issues:
1-1: When I selected the new iPod Touch for the dirst time I got an error message.
A) This was quickly fixed once I calld up apple support on the phone (turns out an IE browser setting was blocking it.)
1-2: With that fixed I selected my iPod Touch again but instead of the window indicated by the tutorial, I instead got an iPod registration form window.
1-3: I filled out the form and pressed the submit button (thinking everything was fine), then a new window came up that looks like this:
Free Find My iPhone
Free Find My iPad
Free Find My iPod touch
Set up Find My iPhone for free so you can locate your device if you lose it, remotely lock the screen, or wipe its data. You can also find your iPad or iPod touch.Set up Find My iPad for free so you can locate your device if you lose it, remotely lock the screen, or wipe its data. You can also find your iPhone or iPod touch.Set up Find My iPod touch for free so you can locate your device if you lose it, remotely lock the screen, or wipe its data. You can also find your iPhone or iPad. _Learn More_
_Set up Find My iPhone_
_Not Now_ _Set up Find My iPad_
_Set up Find My iPod touch_
Find My iPhone (or iPad or iPod touch) enables you to locate your iPad with Wi-Fi or iPod touch only when it is on and connected to a registered Wi-Fi network. Find My iPhone is not available in all countries. "
The first three lines and the first paragraph are indented as if there should be some type of graphic there, but it is missing. The underlined words indicate that they are supposed to be links, but they don't go anywhere, they are broken!
Now wheenever I connect my iPod Touch and select it the above window comes up and nomatter what I try it will not move or change.
Please help!
MSRankin

Try setting up the device in a new user account. or visit register.apple.com and verify your device is registered

Need Help Setting Up a new Network ..

Hello
Newbie question, I am attempting to setup a small home network, where I want three WLANS
Main
Guests
Kids
I want to set up different policies for these three networks.
I want the Kids to be able to access the Media server and other network devices, but limit the internet access. I want guest network to not be able to see the other two networks.
I have an ISA550 Firewall a 2504 Wireless Controller and a SG300-28P Switch.
I did manage to setup the Vlans on the ISA550 - Default as 192.168.75.x , Guest as 192.168.25.x and Kids as 192.168.35.x
From here on - I would need some help setting it up the right way, Please help.
Thanks

rmunoz274 wrote:
I had to call Verizon and spend an hour on the phone, my Versalink is about 3 years old and I never updated it. There is a software update which makes it a little more mac friendly. Cables still run through it on the Ethernet port. I was able to turn the wireless feature off on the Versalink (to stop my neighbors and kids from bypassing the APE and just factory reset the APE and set it up with a shared IP adrs instead of bridging it. Also made sure I turned off the guest network on the APE. Once it was set up I clicked on Airport in the Airport Utility then wireless Clinets, jotted down the client I wanted to restrict access to (Kid's Laptop) then go back to Airport screen, last option on right Access then MAC Adrs Access Control change to "Timed Access", then click the + on the bottom of the window, type the MAC adrs you want to restrict and set time limits, when complete click done..... Only took me a week and a half to figure it out...... Good luck, if that doesn't help let me know, but I'm no expert...
thanks!!
i think i have the most recent 327w update, because it now shows my modem screen in a red color and it is broken into 3 sections across the screen.
as far as the AEBS is concerned, you did not use it in bridge mode at all?
i thought you had to connect 1 cable from it to the 327w? I have about 5 items i will be connecting, so i will probably run any wired from the AESB, but not sure yet?
thanks, and yaeh last time my network took me a bit of time as well!!
what kind of encryption are you running?
thanks

Need help setting up TV equiptment

I have been very ill and I need help setting up my TV, DVR, Receiver, Surround sound systems. I'm afraid if I try to work on all the equiptment, I'll drop my HDTV or other componets because I'm still weak. Can anyone help me? I've called a few places and they want $100.00 to set it up. Give me a break! I know about inputs and outputs and other cables, I just don't have the strength to move the equiptment around. I am willing to pay. Please call me at 813-{edited for privacy}. Thanks, Teresa {edited for privacy}

blondeinneed wrote:
I have been very ill and I need help setting up my TV, DVR, Receiver, Surround sound systems. I'm afraid if I try to work on all the equiptment, I'll drop my HDTV or other componets because I'm still weak. Can anyone help me? I've called a few places and they want $100.00 to set it up. Give me a break! I know about inputs and outputs and other cables, I just don't have the strength to move the equiptment around. I am willing to pay. Please call me at 813-{edited for privacy}. Thanks, Teresa {edited for privacy}
Teresa,
I think the best way for someone to volunteer to help you would be for them to send you a Private Message (PM) here on the forums. You should see a small envelope in the upper right corner of the screen, when it changes color you will know you have a PM to view.
I would be happy to help, but since I am in North Texas I don't think that is a viable option Sorry....
Justin
FiOS TV, Internet, and phone user
QIP7232, QIP7100-P2, IMG 1.9A
Keller, TX 76248

Need help setting up and configuring rsync

Hello
I need help setting up, or rather configuring rsync to sync data between my brand new iMac and my Macbook Air.
Here is what I would like to:
- I want all of the files on both machines to be an exact mirror or copy of each other. Basically I have an iMac for at home, and then a Macbook Air for the road.
- The main folder on both Macs is called 'Sara' and I want the contents (mainly the 'movies' folder, 'music' folder, 'documents' folder and 'pictures' folder) to immediately sync up with each other when both of them are on my home network.
- this means if I'm working on a file at home on my Macbook, it will immediately write to the same directory on my iMac and vice versa (if I'm working on file(s) on my iMac, it will immediately save the contents to my Macbook). This way, if I'm working on last minute project my iMac, and then have to head out the door to the airport, the file is immediately saved to my Macbook (no usb for USB transfer).
- hopefully this makes sense??
Any help is greatly appreciated!
Thanks

It's a lofty but unrealistic goal. Rsync does not run automatically. There is no realistic method of instantaneously synching two computers over the internet or even on a LAN.
I would suggest you might try using Synk Pro which, in theory, can keep two devices in sync when they are both on the same network (and both have shared and mounted drives.)
If you must do this with rsync then I suggest a Google search for rsync tutorials.

I need help setting up an apple id for my sons phone. It seems his email address has been taken and/or we cant get the password.

I need help setting up an apple id for my son's phone. It seems his email address has been taken and/or we cant get the password.

Two different things
If you forgot the password
If you forgot your Apple ID password - Apple Support
If the email ID you want to use is in use by someone else - then you may need a new one
The iCloud ID's are usually unique and may be of help if you set one up

Need help Setting up Multiple Static Ip , 1 for each port of the fios router

Need help Setting up multiple Static Ip on my fios router
I have been trying to figure out how to set up multiple ip in my fios router.
However I kind of managed how to set up multiple static ip However the way I want it is for each port of my router to have an external ip signed to it. ( like 4 different modem in 1 )
Verizon gave me 5 static ip but they can not help me how to set it up.
Have anyone here done more then one static ip on different ports? I assume that the process will be the after the second static ip.

You want to set up Static Nat. You will not assign the IP to a port, but rather to a local machine. Figure out what machines you want your IP's to go to. Under the firewall section you will see static nat. Pick the machine you want and enter one of the IP's you were assigned.

I can't login to solaris server using ssh(putty).

Hi,
I can't login to solaris server using ssh(putty).
However I am able to login to that server using telnet.
# pkginfo | grep -i ssh
system SUNWsshcu SSH Common, (Usr)
system SUNWsshdr SSH Server, (Root)
system SUNWsshdu SSH Server, (Usr)
system SUNWsshr SSH Client and utilities, (Root)
system SUNWsshu SSH Client and utilities, (Usr)
I see that ssh is running. Please suggest.
# ps -ef | grep ssh
root 392 1 0 Feb 27 ? 0:00 /usr/lib/ssh/sshd
root 12523 392 0 Mar 03 ? 0:00 /usr/lib/ssh/sshd
sbasha 12526 12523 0 Mar 03 ? 0:07 /usr/lib/ssh/sshd
sbasha 10957 10954 0 Mar 03 ? 0:05 /usr/lib/ssh/sshd
root 16495 16491 0 10:46:54 pts/2 0:00 grep ssh
root 10954 392 0 Mar 03 ? 0:00 /usr/lib/ssh/sshd
Thanks & Regards,
-Gnanashekar-

Hi,
I found solution to the problem. By default sshd in solars 10 does not permit root logins.
We need to edit /etc/ssh/sshd_config file as follows:
PermitRootLogin yes
and restart the sshd.
#svcadm restart ssh
Thanks & Regards,
-GnanaShekar-

Help setting up ssh (putty) in 2821 routers

Similar Messages

Maybe you are looking for