topic RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)? in ExtremeSwitching (EXOS/Switch Engine)

May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ilya_Semenov — Mon, 16 Jan 2017 21:08:00 GMT

Hello, team!

I've configured IPs for MGMT-ports of all my Exteme switches and connected them to dedicated 2960. Ping works fine but I am unable to connect to the switches with SSH or telnet.

Is it possible?

Thanks!

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ron_Huygens — Mon, 16 Jan 2017 21:16:00 GMT

Hi Ilya,

I assume that you have enabled ssh/telnet and there is no access-list applied on the telnet application?

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ilya_Semenov — Mon, 16 Jan 2017 21:16:00 GMT

Hello, Ron!

Thanks for your reply. I am not sure about the telnet, but ssh was enabled. How can I check whether there are any access-lists applied to "telnet application"? It sound a bit strange for me...

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Henrique — Mon, 16 Jan 2017 21:16:00 GMT

Hi, you can check that through the "show management" command already requested by Ronald.

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ronald_Dvorak — Mon, 16 Jan 2017 21:24:00 GMT

Is the ping source and the switch mgmt IP in the same subnet - please post the CLI output for "show management".

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ilya_Semenov — Mon, 16 Jan 2017 21:24:00 GMT

Hi,Ronald!

I will post the output in several hours, thank you...

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ilya_Semenov — Mon, 16 Jan 2017 21:24:00 GMT

Hello, Ron!

Here it is - "show management" output. How can I check what is "mgt" access-profile?

Many thanks to you!

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ron_Huygens — Mon, 16 Jan 2017 21:24:00 GMT

Hi Ilya,

So there is a policy file called mgt.pol. That probably prevent you of logging in.
With "vi mgt.pol" you can see the content.
with "configure telnet access-profile none" you can remove the access profile.

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Vellachery__Sum — Mon, 16 Jan 2017 21:24:00 GMT

Ilya,

As Ron pointed out to remove the access profile configured for telnet. In the similiar way, remove the access profile configured for SSH

"configure ssh2 access-profile none".

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Ilya_Semenov — Tue, 17 Jan 2017 16:46:00 GMT

Thank you very much, gentlemen!

I've added required prefixes to access-profile file and not it works.

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Henrique — Tue, 17 Jan 2017 19:37:00 GMT

For further reference, please see the article below:

https://gtacknowledge.extremenetworks.com/articles/How_To/Create-an-ACL-on-an-XOS-switch-for-SSH2-se...

RE: May I connect with SSH2 or telnet to the decicated MGMT-port (VR-Mgmt VLAN)?

Yusuf_Kabbara — Tue, 17 Jan 2017 19:37:00 GMT

Hello Henrique,

Does the same reference applies for telnet as well as SSH?
Is "Controlssh" refer to a name or has a function!?

Thanks
Yusuf