Telnet/SSH access

I am unable to telnet or ssh to a router from internet (LAN works fine). I see following in debug logs on the router
*Jun  7 12:19:22: TCP0: state was LISTEN -> SYNRCVD [22 -> <Outside IP removed>(59121)]
*Jun  7 12:19:22: TCP: tcb 85455EE8 connection to <Outside IP removed>:59121, peer MSS 1260, MSS is 516
*Jun  7 12:19:22: TCP: sending SYN, seq 1340633744, ack 114092318
*Jun  7 12:19:22: TCP0: Connection to <Outside IP removed>:59121, advertising MSS 536
*Jun  7 12:19:22: TCP0: RST received, Closing connection
*Jun  7 12:19:22: TCP0: state was SYNRCVD -> CLOSED [22 -> <Outside IP removed>(59121)]
*Jun  7 12:19:22: tcp0: T CLOSED <Outside IP removed>:59121 <Telnet Host IP removed>:22 early close
*Jun  7 12:19:22: TCB 0x85455EE8 destroyed
Is it something to do with mss?
Any help would be greatly appreciated.

Hi sajidilyas,
Have you solved the issue?
In my case, It's seems caused by asymetric routing. CMIIW
I'm still waiting for next testing.

Similar Messages

  • 6800ia telnet ssh access

    Does anyone know if it's possible to telnet to a 6800ia directly?
    Specifically I need to do a show inventory to get the SN of the SPF+ modules.
    You can do this from the console but not sure how to do it from the 6880

    Use remote login fex fex-id from parent switch.
    Regards, Bruno

  • WCS Global Telnet/SSH Parameter Change

    I have almost 700 Wireless LAN Controllers in my environment, and due to security compliance, I need to update the local administrator account for each one of them. My concern is that when I push a template with a new admin password, WCS will lose Telnet/SSH access to all 700 controllers, because the Telnet/SSH Parameters for each controller are currently set as the local administrator.
    Is it possible to update the Telnet/SSH parameters for every WLC? I know it is possible to update them one at a time through Configure > Controller and updating it via the Properties tab, but there doesn't seem to be a way to push a template to WCS itself which would update the telnet/ssh access globally.
    The closest thing I can think of is re-adding every single controller via CSV file and changing the Telnet/SSH Parameters that way, but I would need to remove every controller from WCS first, and that's not really an acceptable solution.

    I  don't know is it right answer for u or not:)
    1. Choose Configure > Controller Template Launch Pad.
    2. Click Local Management Users or choose Management > Local Management Users from the left sidebar menu. 
    Here create a new template with new username and password (with RW or RO) and apply to all controllers and if you want then delete old user from wlc.
    Regards
    Dont forget to rate helpful posts

  • LAN Switches cannot be accessed by Telnet, SSH or console in native vlan

    Hi to all of you:
    I do have a question about tagging the native vlan.
    In our network we do have about 90 L2 and L3 switches, 2950 the oldest, 2960, 2960S, 3560 PoE, 3750 and 4503E, and we are running VTP, and 43 vlans within the entire network.
    our Native VLAN is still vlan 1, and there are many corporative applications running in this vlan.
    We have upgraded the IOS for the switches to the latest IOS version about 6 months ago, and after that we started to have issues on the switches, related to accessing the switch, either by telnet, ssh, or even console. However, the switch is still working fine, I mean, doing all bridging and switching traffic.
    I have to reset or reload (power cycle) if I want to access the switch.
    I have read that having the native vlan can be a problem.
    Could you please let me know if you have gone through this problem?
    Thanks in advance for your help.
    Javier F. Berthin H.

    Hi Karhtick:
    I guess you have the best answer, you suggested the memory command and I am attaching you as result.
    Next step should be to downgrade the IOS?, because we did the upgrade just in order to have the latest IOS published by Cisco.
    If you need the config please let me know, for complementary comments.
    Thanks for your help.
    Javier
    Core_Toldos#
    Core_Toldos#
    Core_Toldos#sh processes memory sorted
    Processor Pool Total:   57114592 Used:   42061488 Free:   15053104
          I/O Pool Total:   12582912 Used:    9397428 Free:    3185484
    Driver te Pool Total:    1048576 Used:         40 Free:    1048536
    PID TTY  Allocated      Freed    Holding    Getbufs    Retbufs Process
       0   0   56706116   14325484   38372056          0          0 *Init*
    197   0    4506712    2363500    1463652          0          0 Auth Manager
       0   0          0          0    1443720          0          0 *MallocLite*
       0   0  577244636  370831296     916016   12457311    3203234 *Dead*
    236   0     532808      46152     507068          0          0 IP ARP Adjacency
    303   0    1335768     890528     450448          0          0 ADJ resolve proc
    230   0   27640244      15996     378344      10152          0 CDP Protocol
      77   0     368260   14413456     377820          0          0 EEM ED ND
    102   0     385848        232     362236          0          0 HLFM address lea
    404   0    3397428    3069392     334928          0          0 hulc running con
    192   0     307492      21604     294808          0          0 HL2MCM
    193   0     356552      70624     294744          0          0 HL2MCM
    357   0     265100          0     275260     100548          0 EEM ED Syslog
    365   0  126849404   86726456     255248          0          0 EEM Server
      87   0     569060     274864     244984          0          0 Stack Mgr Notifi
    203   0     753032     492440     164316          0          0 DTP Protocol
    201   0     737920     526656     159424          0          0 802.1x switch
      13   0  505129716  504972016     156620          0          0 ARP Input
    Core_Toldos#

  • ASA5520 - Management0/0 Telnet/SSH/Ping Access

    hey all, hope this is an easy one.
    - how can i setup the management interface so that we can ping to the mgmt interface from a subnet that is on a different subnet than the Management0/0 interface (source ip would be 192.168.100.0/24 which may conflict with the inside interface)
    - i am able to telnet/ssh from the 192.168.100.0/24 subnet connected to a router behind the mgmt interface
    - i am not able to ping the mgmt interface from the 192.168.100.0/24 subnet connected to a router behind the mgmt interface
    - is a security level required on the mgmt interface? it does not  work unless we put one. if so, what are you guys setting it to?
    interface Ethernet0/0.101
    description Outside
    vlan 101
    nameif outside
    security-level 0
    ip address 101.1.1.100 255.255.255.0
    interface Ethernet0/1.102
    description Inside Cat3750-VM G1/0/24 (PRI) G2/0/24 (STB)
    vlan 102
    nameif inside
    security-level 100
    ip address 192.168.100.100 255.255.252.0
    interface Management0/0
    nameif mgmt
    security-level 90
    ip address 192.168.253.100 255.255.255.0
    management-only
    ssh 192.168.100.0 255.255.255.0 mgmt
    telnet 192.168.100.0 255.255.255.0 mgmt
    I try to add a static route but get an error:
    ASA5520(config)# route mgmt 192.168.0.0 255.255.252.0 192.168.253.1
    ERROR: Cannot add route, connected route exists

    Hello Robert,
    by default the Managment interface of an ASA is going to be used just for managment traffic only.
    Now in order to be able to use it as any other interface you will need to use the following command:
         -     Interface managment 0/0
         -     no managment-only
    And just to let you know it is imposible to ping a distant interface as an example from a inside subnet to the outside interface ip .This as security measure.
    Regards,
    Julio

  • Can't ping, telnet, SSH or find APs in ARP, but associated to WLC & has clients

    Hi All,
    I have an interesting problem. I have a Cisco 2504 WLC, and six Access Points that are associated to it.  I can reach 4 of the access points, which are connected to Cisco 300 POE switches, but the other 2 I cannot ping, telnet, SSH or find in the ARP table on the network.  However, they are both associated to the WLC and as far as I can tell, they have clients associated to them.  If I reboot them from the WLC, they find their way back to the correct WLC, and the WLC sees them in CDP, but I still can't access them in any way.
    The two problem APs appear to be connected to ports 3 & 4 on the WLC, which are the POE ports. I read some documentation that says that those ports don't support Access Points but basically that you can still connect them and have it work, but don't expect any help from Cisco if you run into problems.  I've confirmed that POE is being supplied in the port configs, and I have other sites with WLC's that are configured identically with APs on ports 3 & 4 that are up and not having any issues.
    Wondering if anyone has had similar issues and if so, can you shed any light on this strange behavior?
    Thanks.

    please
    https://supportforums.cisco.com/discussion/11288621/2500-wlc-attach-ap

  • Unable to Telnet / SSH to a particular cisco switch

    Hello,
    I have an unusual issue that I just can't seem to track down.  We have a Windows Server 2008 R2 box that is unable to telnet or ssh to one switch in our network.
    Server IP:  10.0.0.74
    Cisco Switch IP:  10.1.0.7
    I am able to access all other switches/routers on the 10.1.0.x network, but not this one.  I ping and tracert by ip address and name.
    We have a number other servers on our network and they all can access this switch
    Example:  
    a.  10.0.0.73 can telnet/ssh to 10.1.0.7
    b.  10.0.0.72  can telnet/ssh to 10.1.0.7
    c.  10.0.0.50  can telnet/ssh to 10.1.0.7
    d.  My workstation (10.0.250.213) can telnet/ssh to 10.1.0.7
    If anyone can help with troubleshooting further, I would greatly appreciate it.

    Thanks for the reply Philippe!  Here is the route print
    IPv4 Route Table
    ===========================================================================
    Active Routes:
    Network Destination        Netmask          Gateway       Interface  Metric
              0.0.0.0          0.0.0.0         10.0.0.2        10.0.0.74    266
             10.0.0.0      255.255.0.0         On-link         10.0.0.74    266
            10.0.0.74  255.255.255.255         On-link         10.0.0.74    266
         10.0.255.255  255.255.255.255         On-link         10.0.0.74    266
            10.10.0.0      255.255.0.0         On-link         10.0.0.74    266
           10.10.0.74  255.255.255.255         On-link         10.0.0.74    266
        10.10.255.255  255.255.255.255         On-link         10.0.0.74    266
            127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
            127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
      127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
            224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
            224.0.0.0        240.0.0.0         On-link         10.0.0.74    266
      255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      255.255.255.255  255.255.255.255         On-link         10.0.0.74    266
    ===========================================================================
    Persistent Routes:
      Network Address          Netmask  Gateway Address  Metric
              0.0.0.0          0.0.0.0         10.0.0.2  Default
    ===========================================================================
    IPv6 Route Table
    ===========================================================================
    Active Routes:
     If Metric Network Destination      Gateway
      1    306 ::1/128                  On-link
      1    306 ff00::/8                 On-link
    ===========================================================================
    Persistent Routes:
      None
    Firewall is disabled and there is no active antivirus.  Im pretty sure port blocking is not the issue.  I am able to ssh and telnet from this box to every other switch/router in our network.
    This server has Solarwinds on it and tracks the health of our network (servers, routers, switches, ups, ect.).  The only reason we noticed an issue is because it stopped backing up the config for this particular switch.  All other switchs/routers
    config is backed up to this server every morning at 2:00AM.  
    With solarwinds, this server is also able to communicate with this switch via snmp / icmp and ping.
    Thanks again for the help!

  • Telnet/ssh client for mac

    My company uses a telnet/ssh client for windows called putty and since they only make it for windows i need something like it. They use the putty client to access the companies wireless internet system on that has an assigned ip. Actually they only use the ssh part of the client so i guess that woudl be fine for me too. If my mac will do it itself that would be great too. I just am completely lost anything would be great.

    and if you need to create ssh tunnels, have a look at SSH Tunnel Manager
    tunnel manager is not really necessary if your already using the terminal.
    ssh -L 5901:localhost:5902 serverip.
    The above is an example of creating a listing port making a tunnel for the above port this what people use for tunneling to initiate a vnc session for example.

  • Block Telnet/SSH

    Applying the below to a Catalyst 3560 switch, I can only telnet/ssh using 10.1.0.1. Host 10.1.0.50 telnet/ssh is blocked.
    Please advise.
    access-list 101 permit host 10.1.0.1 any eg 22
    access-list 101 permit host 10.1.0.1 any eg 23
    access-list 101 permit host 10.1.0.50 any eg 22
    access-list 101 permit host 10.1.0.50 any eg 22
    line vty 0 4
    access-class 101 in

    Colm
    If the first two lines work then I would expect the second two lines to also work. My first thought is that there may be some difference in what is actually configured and what you posted (especially since it is obvious that you just typed in the access list and did not copy it from the device config - the missing TCP parameter in the access list shows that. So copy the access list exactly from the device and post it.
    Other possibilities that occur to me:
    - is it possible that there is some IP connectivity issue which prevents 10.1.0.50 from connecting (or prevents responses from going back)?
    - is it possible that there are interface access lists which prevent the connection?
    Collin
    While I agree with you that it is generally better to use standard access lists with access-class, I do not believe that changing from extended to standard access list will solve this problem. If the problem were the extended access list then how does 10.1.0.1 work?
    HTH
    Rick

  • Telnet/SSH Connection to Switch

    I'm studying for the CCENT, and I have one issue and two general inquiries I'd like to present.  
    First of all, I'm having trouble connecting to my 2950 using Telnet/SSH, though I've applied a VTY password.  As an aside, I'm able to connect through the console.  I applied an IP address to the switch, and I'm wondering if there's a part of the process that I've missed.  When using Putty to connect to the IP, I immediately receive the "Network Error: Connection refused" error; the same basic message happens, using Tera Term.  
    Here's my running config:
    Switch#show running-config
    Building configuration...
    Current configuration : 2416 bytes
    version 12.1
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    no service password-encryption
    hostname Switch
    no logging console
    username CCNA password 0 CCIE
    ip subnet-zero
    ip domain-name modeofinquiry.com
    ip ssh time-out 120
    ip ssh authentication-retries 3
    spanning-tree mode pvst
    no spanning-tree optimize bpdu transmission
    spanning-tree extend system-id
    interface FastEthernet0/1
     switchport mode access
    interface FastEthernet0/2
     switchport mode access
    interface FastEthernet0/24
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/25
    interface FastEthernet0/26
    interface Vlan1
     no ip address
     no ip route-cache
     shutdown
    interface Vlan2
     ip address 192.168.1.107 255.255.255.0
     no ip route-cache
    ip default-gateway 192.168.1.1
    ip http server
    line con 0
     exec-timeout 0 0
     password CCENT
     logging synchronous
     login
    line vty 0 4
     login local
     transport input telnet ssh
    line vty 5 15
     login local
     transport input telnet ssh
    end
     --More--
    The physical connection I'm using is from my desktop's second NIC, and I've configured the IPv4 connection to the switch's listed IP, which is 192.168.1.107.  Is there anything listed above that would be problematic?
    One of my questions has to do with the IP address that's supposed to be used to receive rsa keys: why is it necessary?  Also, I tried entering the "ip address dhcp" command to grab an address from my WRT54G and received the following:
    Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
    Switch(config)#int vlan2
    Switch(config-if)#ip address dhcp
                                 ^
    % Invalid input detected at '^' marker.
    I'm following the directions in Odom's book, and I don't see what I'm missing.  
    My other question has to do with passwords, in general.  Entering the username/password on either the interface-subcommand or the global configuration area seems unimportant, here:
    Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
    Switch(config)#line vty 0 15
    Switch(config-line)#login local
    Switch(config-line)#transport input ssh telnet
    Switch(config-line)#username DDDD password EEEE
    Switch(config)#^Z
    ...and...
    Switch#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
    Switch(config)#line vty 0 15
    Switch(config-line)#login local
    Switch(config-line)#transport input ssh telnet
    Switch(config-line)#exit
    Switch(config)#username FFFF password GGGG
    Switch(config)#^Z
    Here's the running config, afterwards:
    Switch#show running-config
    Building configuration...
    Current configuration : 2535 bytes
    version 12.1
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    no service password-encryption
    hostname Switch
    no logging console
    username CCNA password 0 CCIE
    username BBBB password 0 CCCC
    username DDDD password 0 EEEE
    username FFFF password 0 GGGG
    ip subnet-zero
    ip domain-name modeofinquiry.com
    ip ssh time-out 120
    ip ssh authentication-retries 3
     --More--
    It doesn't appear as though exiting out of config-if mode made any difference for the usernames/passwords.  Then again, I can't connect through Telnet/SSH, so I'm not able to test it, at the moment.  
    I'm really sorry for the huge post, but I didn't want to start multiple threads.  Any help is much appreciated.
    - B 

    First of all, thank you all for the helpful responses!
    My PC is currently connected through the router, from which a straight-through cable is connected to port Fa0/18, and it is indeed on vlan2, which is associated with 1.107.  
    I ran the arp -a command, and here's a portion of it:
    Interface: 192.168.1.105 --- 0xc
      Internet Address      Physical Address      Type
      192.168.1.1           00-0c-41-d4-6d-a1     dynamic
      192.168.1.104         64-a3-cb-3d-07-64     dynamic
      192.168.1.107         00-0a-b7-13-e5-c0     dynamic
    1.105 is one of the NICs on the desktop.  The BIA listed for 1.107 is one of the static "CPU" addresses on the switch.  Here's my current running config:
    Switch#show running-config
    Building configuration...
    Current configuration : 2434 bytes
    version 12.1
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    no service password-encryption
    hostname Switch
    no logging console
    username CCNA password 0 CCIE
    ip subnet-zero
    ip domain-name modeofinquiry.com
    ip ssh time-out 120
    ip ssh authentication-retries 3
    spanning-tree mode pvst
    no spanning-tree optimize bpdu transmission
    spanning-tree extend system-id
    interface FastEthernet0/1
     switchport mode access
    interface FastEthernet0/2
     switchport mode access
    interface FastEthernet0/18
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/19
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/20
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/21
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/22
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/23
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/24
     switchport access vlan 2
     switchport mode access
    interface FastEthernet0/25
    interface FastEthernet0/26
    interface Vlan1
     no ip address
     no ip route-cache
     shutdown
    interface Vlan2
     ip address 192.168.1.107 255.255.255.0
     no ip route-cache
    ip default-gateway 192.168.1.1
    ip http server
    line con 0
     exec-timeout 0 0
     password CCENT
     logging synchronous
     login
    line vty 0 4
     password NICE
     login
     transport input telnet ssh
    line vty 5 15
     password NICE
     login
     transport input telnet ssh
    end
    As you can see, I've added the VTY passwords, though I thought I had already done that.  Actually, to what do the "CCNA" and "CCIE" passwords listed above apply?  I'm assuming those are the local login credentials I added for the VTY lines.  
    I just got through disconnected the switch's straight-through cable from the router and connected it directly to my desktop's second NIC again, and I still can't connect, remotely.  Where should the troubleshooting start, at this point?

  • Mac Mini login GUI not responding (but SSH access OK)

    I have an ongoing intermittant issue with my Mac Mini (running Lion).
    I can see the login GUI but can't login!  Sometimes the mouse pointer moves in response to my trackpad motions but the "click" doesn't respond when I try it. Generally the keyboard doesn't seem to respond (but pressing "enter" does wake-up the screen).
    I have the problem at the moment and have managed to actually enter 3 characters of my password, but now it's not responding.
    VNC access is enabled and if I connect via that method the results are exactly the same (so it's not an issue with my actual/physical keyboard or mouse).
    I have enabled SSH access and I can login via this method so the system is still responding.  I have run "top" from the SSH session and no particular process seems to be "hogging" the system.
    So I am at a loss as what to do.
    I would appreciate any advice on how to fault-find this via the SSH session.

    In System Preferences>Accounts, unlock the lock, click the little + icon & add a new Admin user, log into that account & see if it works.
    While in Safe mode/boot, in System Preferences>Accounts, unlock the lock, click the little + icon & add a new Admin user, log into that account & see if it works if you set the new user to Automatically login.

  • Best practice for SSH access by a user across multiple Xserves?

    Hello.
    I have 3 Xserves and a Mac Mini server I'm working with and I need SSH access to all these machines. I have given myself access via SSH in Server Admin access settings and since all 4 servers are connected to an OD Master (one of the three Xserves), I'm able to SSH into all 4 machines using my username/password combination.
    What I'm unsure of though is, how do I deal with my home folder when accessing these machines? For example, currently, when I SSH into any of the machines, I get an error saying...
    CFPreferences: user home directory at /99 is unavailable. User domains will be volatile.
    It then asks for my password, which I enter, and then I get the following error...
    Could not chdir to home directory 99: No such file or directory
    And then it just dumps me into the root of the server I'm trying to connect to.
    How should I go about dealing with this? Since I don't have a local home directory on any of these servers, it has no where to put me. I tried enabling/using a network home folder, but I end up with the same issue. Since the volume/location designated as my home folder isn't mounted on the servers I'm trying to connect to (and since logging in via SSH doesn't auto-mount the share point like AFP would if I was actually logging into OS X via the GUI), it again says it can't find my home directory and dumps me into the root the server I've logged in to.
    If anyone could lend some advice on how to properly set this up, it would be much appreciated!
    Thanks,
    Kristin.

    Should logging in via SSH auto-mount the share point?
    Yes, of course, but only if you've set it up that way.
    What you need to do is designate one of the servers as being the repository of home directories. You do this by simply setting up an AFP sharepoint on that server (using Server Admin) and checking the 'enable user home directories' option.
    Then you go to Workgroup Manager and select your account. Under the Home tab you'll see the options for where this user's home directory is. It'll currently say 'None' (indicating a local home directory on each server). Just change this to select the recently-created sharepoint from above.
    Save the account and you're done. When you login each server will recognize that your home directory is stored on a network volume and will automatically mount that home directory for you.

  • Prime 4.2 Telnet/ SSH Connections to Switches

    Hi everybody,
    I have a problem with LMS 4.2 and use Telnet/ SSH tool to open network devices.
    If I start the tool telnet/ssh, always starts a telnet session and no ssh session.
    But telnet is disabled on all devices in my network. Can I change something to open automatically a ssh session with putty?
    regards Bjoern

    Hi Bjoern,
    I am assuming you refer to the Device Center > Tools > Telnet/SSH option.
    The problem is not on LMS actually. What happens is that in the background, a telnet:// is being called.
    What will happen is that your system will launch whatever application has been assigned to the telnet protocol, typically the Windows CMD, which will open a telnet session automatically.
    In order to change this to use Putty for example, which would allow you to change to SSH connectivity (manually though) you can do the following:
    1) BACKUP YOUR REGISTRY.
    Go to Start > Run > Regedit > File > Export.
    2) Locate the following key:
    HKEY_CLASSES_ROOT > Telnet > shell > Open > command > (default)
    3) Modify the key value to point to the location of your "putty.exe" file (make sure to include the double quotes).
    Default value:
    "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\url.dll",TelnetProtocolHandler %l
    New value (will open putty automatically to the selected IP):
    "D:\Tools\putty.exe" %l
    New value (will open putty normally, you will need to type the IP but can change the connection protocol/port if desired):
    "D:\Tools\putty.exe"
    This should make your system open Putty for any "telnet://" links, including the Telnet/SSH link in the Tools section of Device Center.
    Best regards,
    Luis
    Message was edited by: Luis Jimenez
    Message was edited by: Luis Jimenez

  • Allow telnet to access to sapgw within Windows Cluster

    Hello!
    I have problem to start the J2EE stack of central instance (02) in MSCS cluster on Windows 2003.
    The error seems to be connected with start of SAP Gateway.
    The following telnet commando is failed
    >telnet server sapgw02
    The appropriate entry sapgw02 3302
    in C:\Windows\system32\drivers\etc\services exists…
    How to allow telnet to access to sapgw02?
    Is there some network settings?
    Thank you very much!
    Thom

    Hi,
    I suggest you to check gateway trace file dev_rd first.
    Make sure SAP gateway is configured, as per:
    http://help.sap.com/saphelp_47x200/helpdata/en/bb/9f12ff4b9b11d189750000e8322d00/content.htm
    cheers,
    Vincent

  • Cisco Nexus 3000 ssh access

    I have a Cisco  Nexus 3172T in a small environment running System version: 6.0(2)U3(1). I am using a vlan as management access, i.e. vlan100 is on every device and is using for snmp/ssh access. On the same switch I have one non-switchport (routed) port (eth1/6 in this case) connecting to a remote datacenter. I am able to SNMP poll and ping the vlan100 interface on the switch from everywhere, and I am able to SSH login while I am connected on any of the VLANs that are known to the switch. My problem comes when trying to access (SSH) the switch from the remote datacenter location (SNMP/Ping also works from the remote location). The only way to SSH access the switch from the remote location is only if I SSH in on the routed port (i.e. eth 1/6).
    I am not using the dedicated management port on the switch (nor I have any plans in the future). I am also running very plain config, a few switchports, one routed port, and the default control-plane policy (which is only policy pps). There are the ACLs on the VTY.
    Am I running into a known bug or is there some configuration requirement to allow this ?
    thanks
    dragan

    Its not in a VRF or anything like that is it?
    Also have you tried setting the ssh source interface to be vlan 100.
    http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/security/6x/b_Cisco_n3k_Security_Config_6x/b_Cisco_n3k_Security_Config_6x_chapter_0110.html#task_4AFC76AF5CD04C728EF30CB15EAE2655

Maybe you are looking for

  • Iphoto 6 and RAW

    My question is in two parts: 1)Iphoto 6 doesn't download RAW images from my CF card slot on my printer, so I manually import them. Is there a better way? 2) I know that altered images are kept in a separate directory to the originals, but how can I i

  • Database Expert causes CR to lock up

    I created a new report with 1 database connection via OLE - ADO.  Everything works fine until I need to add more tables to my report.  When I try to access the Database Expert, CR locks up completely.  There is no indication that it is waiting for in

  • Unable to upload a music album to music library. i was able to upload with older version of iTunes.

    unable to upload a music album to music library. i was able to upload with older version of iTunes. with the latest update this issue started happening

  • Anomaly regarding first entry in explain and explain join

    Hello there, I have TPC-H benchmark database and I ran the following query with and without index on the column p_retailprice select      s_acctbal,s_name,n_name,p_partkey,p_mfgr,s_address,s_phone,s_comment from      dbo.part,dbo.supplier,dbo.partsup

  • Adobe indesign, Web content, use only a part of the website.

    In Adobe InDesign i want to make a webconten but I don't want to show the whole website. My teacher showed us that we could go to the website, and "inspect the elements" and find the codes for the different places on the site. I think he told us to l