• February 09, 2012, 12:23:34 PM
Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: ERS5510 SSH  (Read 719 times)

0 Members and 1 Guest are viewing this topic.

Offline udobock

  • Rookie
  • **
  • Posts: 6
ERS5510 SSH
« on: March 18, 2010, 09:00:46 AM »
Hi,

I am unable to loggin with SSH to a ERS5510.

FW: 5.004 SW: 5.15009

This is how I try it:

Code: newbielink:javascript:void(0); [nonactive]
ERS5510(config)#no password security

ERS5510(config)#snmp-server view root +1

ERS5510(config)#snmp-server user <someone> sha <passwort>  read-view root write-view root notify-view root

ERS5510(config)#snmp-server user <anotherone> read-view root

ERS5510(config)#ssh

ERS5510(config)#copy conf nvram

SNMPv3 works fine.

If I try to login ovewr SSH:

Code: newbielink:javascript:void(0); [nonactive]
login as: someone

someone@#########'s password:

Access denied

someone@#########'s password:


yes, i try the right Password. ;)
yes, i am able to loggin with telnet.

Code: newbielink:javascript:void(0); [nonactive]
ERS5510(config)#show snmp-server view

View Name                        ST RS View Spec(s)

-------------------------------- -- -- -------------------------------------

root                             NV AC +1

-------------------------------- -- -- -------------------------------------

nncli                            RO AC +1.3

                                 RO AC +1.0.8802.1.1.1

                                 RO AC +1.0.8802.1.1.2

                                 RO AC +1.2.840.10006.300.43

-------------------------------- -- -- -------------------------------------

snmpv1Objs                       RO AC +1.3

                                 RO AC -1.3.6.1.6

                                 RO AC +1.0.8802.1.1.1

                                 RO AC +1.0.8802.1.1.2

                                 RO AC +1.2.840.10006.300.43

                                 RO AC +1.3.6.1.6.3.10

                                 RO AC +1.3.6.1.6.3.12

                                 RO AC +1.3.6.1.6.3.13

                                 RO AC +1.3.6.1.6.3.1.1.4

                                 RO AC +1.3.6.1.6.3.1.1.5

-------------------------------- -- -- -------------------------------------

webSnmpObjs                      RO AC +1.3

                                 RO AC +1.0.8802.1.1.1

                                 RO AC +1.0.8802.1.1.2

                                 RO AC +1.2.840.10006.300.43

-------------------------------- -- -- -------------------------------------

 

ERS5510(config)#show snmp-server user

---------------------------------------------------------------------------

User Name:  anotherone

SNMP Engine ID:  Local

Authentication Protocol:  None

Privacy Protocol:  None

Storage Type:  Non Volatile (NVRAM)

Status:  Active

Views for Unauthenticated Access:

    Read View:    root

    Write View:

    Notify View:

---------------------------------------------------------------------------

User Name:  someone

SNMP Engine ID:  Local

Authentication Protocol:  SHA

Privacy Protocol:  None

Storage Type:  Non Volatile (NVRAM)

Status:  Active

Views for Unauthenticated Access:

    Read View:

    Write View:

    Notify View:

Views for Authenticated Access:

    Read View:    root

    Write View:   root

    Notify View:  root

---------------------------------------------------------------------------


some hints?

regards

Udo


Offline Michael McNamara

  • Administrator
  • Hero Member
  • *****
  • Posts: 2157
    • Michael McNamara
Re: ERS5510 SSH
« Reply #1 on: March 18, 2010, 03:14:27 PM »
The SNMPv3 configuration doesn't really have bearing on the SSH configuration. You'll need to have the secure image (software) installed in order to enable SSH, which it appears you have, otherwise the "ssh" command would have errored out on you.

You need to use the username "RW" or "RO" along with the coresponding password when connecting to the switch via SSH.

Good Luck!
If you've found this site useful and helpful, please help me spread the word. Link to us in your blog or homepage or Tweet about us! - Thanks!

Offline Peter Nguyen

  • Full Member
  • ***
  • Posts: 64
Re: ERS5510 SSH
« Reply #2 on: March 18, 2010, 05:29:42 PM »
   
Check to see if ssh configured properly
         
SW#show ssh global
Active SSH Sessions     :  1
Version                 :  Version 2 only
Port                    :  22
Authentication Timeout  :  60
DSA Authentication      :  True
Password Authentication :  True
DSA Auth Key TFTP Server: 
DSA Auth Key File Name  :
DSA Host Keys           :  Exist
Enabled                 :  True
DSA Auth Key TFTP Server: 
DSA Auth Key File Name  :
Last Transfer Result    :  None

Generate new key and try ssh again.

SW(config)#no ssh
SW(config)#ssh dsa-host-key
SW(config)#ssh


Good Luck!
« Last Edit: March 18, 2010, 05:39:30 PM by ngutri000 »

Offline udobock

  • Rookie
  • **
  • Posts: 6
Re: ERS5510 SSH
« Reply #3 on: March 22, 2010, 04:37:57 AM »
Thanks!

User: RW works!

Offline Michael McNamara

  • Administrator
  • Hero Member
  • *****
  • Posts: 2157
    • Michael McNamara
Re: ERS5510 SSH
« Reply #4 on: March 22, 2010, 12:33:59 PM »
Happy to hear that it's working!
If you've found this site useful and helpful, please help me spread the word. Link to us in your blog or homepage or Tweet about us! - Thanks!