Network Management

 View Only
last person joined: 21 hours ago 

Keep an informative eye on your network with HPE Aruba Networking network management solutions
Expand all | Collapse all

Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

This thread has been viewed 25 times
  • 1.  Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    Posted Aug 05, 2021 11:43 AM
    Hi Team,

    I have recently upgraded my network from 3com to Aruba 2930f switches and almost all my vastly placed cabinets i have Aruba switches configured with VSF Stucking and all have fibre trunk port patched to My Fabric core.
    Everything is working fine but besides having enabled inbound telnet and SSH, i cannot ping nor telnet to those arubas from my office machine through the network. I can only access them via physical console cable.
    Is there abything i am missing interms of how to enable telnet, ssh and ping to these aruba switches?

    Regards,

    Brian

    ------------------------------
    Brian Yusufu
    ------------------------------


  • 2.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    MVP EXPERT
    Posted Aug 06, 2021 03:38 AM
    Firstly check  SSH is indeed enabled, you can run the command 'show ip ssh' to determine this. Is IP Routing enabled?

    ------------------------------
    Craig Syme
    ------------------------------



  • 3.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    Posted Aug 11, 2021 01:51 AM
    Yes, it is. But still i cannot reach them.






  • 4.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    MVP GURU
    Posted Aug 11, 2021 02:10 AM
    Hi, what's about how VLANs (if any) are propagated from the Core to Access? check VLANs on downlinks, IP switch addressing and gateway (on access) on selected VLAN, etc.

    With a little bit of effort you should be able to find the cause of your problem.

    ------------------------------
    Davide Poletto
    ------------------------------



  • 5.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    Posted Aug 11, 2021 02:26 AM
    Hi David,

    Yes i have VLANs configured and everything is working perfectly well except that i cannot reach the switches as stated below.

    I have enabled routing, Ip route 0.0.0.0 0.0.0.0 10.225.145.1

    Each and every client connected on each particular VLAN are able to operate and get their services allocated to each Vlan.

    Before the Aruba upgrade from 3coms, we were able to access all the 3coms. i compared the configuration and did my best to configure the Aruba switches with similar common ACLS, Routing, Management and Data Vlans, NTP, SNMP etc

    I just didn't touch anything on the Core Fabric as i was reusing the same IP Address for the Fiber connected to the core and almost reasonable similar configs to the 3com.

    I will check further to see what i am missing on the Arubas.

    Regards,

    Brian 





  • 6.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    MVP
    Posted Aug 12, 2021 07:51 AM

    Did you set the default gateway on the unreachable switches?
    I think You have to create a route and also add the gateway of the core on the switch so it will send the traffic  
    ip default route 0.0.0.0/0.0.0.0 10.225.145.1 
    ip default gateway 10.225.145.1

    If you have another device on the same vlan as the switches you want to manage, the might also work  
    Ex
    core
     10.225.145.1
    sw1
    10.225.145.21

    from the code, you can probably reach the access switch  or if you have a workstation on that vl with 10.225.145.10 ip, that probably would work  



    ------------------------------
    Phillip Horn
    ------------------------------



  • 7.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    MVP GURU
    Posted Aug 12, 2021 08:18 AM
    Hi, provided that access switches haven't IP Routing enabled and they have an IP address set on a propagated VLAN ID used for management purposes (indeed here we start with the assumption they are uplinked to Core and uplink ports allow the very same set of VLAN IDs) then using the Core IP address on that very VLAN ID as the Default Gateway is enough (automatically a default route is created).

    From an access switch you should be able to ping/telnet/ssh the Core and vice-versa (if nothing else - ACL? - is blocking such services or their reachability from other segments of your network).

    ------------------------------
    Davide Poletto
    ------------------------------



  • 8.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    Posted Aug 12, 2021 01:41 PM
    Hi Team,

    Thanks, a lot guys for all your positive contribution, i eventually discovered that i didn't specify source IP(telnet Server Ip) after running "sho ip ssh' command as follows:

    MyAruba(config)# sh ip ssh

      SSH Enabled     : Yes                 Secure Copy Enabled : No
      TCP Port Number : 22               Timeout (sec)       : 120
      Rekey Enabled   : No                  Rekey Time (min)    : 60
                                            Rekey Volume (KB)   : 1048576
      Host Key Type   : RSA                 Host Key/Curve Size : 2048

      Ciphers :
    L5Z13(config)# sh ip ssh

      SSH Enabled     : Yes                 Secure Copy Enabled : No
      TCP Port Number : 59987               Timeout (sec)       : 120
      Rekey Enabled   : No                  Rekey Time (min)    : 60
                                            Rekey Volume (KB)   : 1048576
      Host Key Type   : RSA                 Host Key/Curve Size : 2048

      Ciphers : #######################################
      MACs    : $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

      Ses Type     | Source IP                                      Port
      --- -------- + ---------------------------------------------- -----
      1   console  |
      2   telnet   |
      3   inactive |
      4   inactive |
      5   inactive |
      6   inactive |
      MACs    : $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

      Ses Type     | Source IP                                      Port
      --- -------- + ---------------------------------------------- -----
      1   console  |
      2   telnet   |
      3   inactive |
      4   inactive |
      5   inactive |
      6   inactive |

    After i declared source IP, then all came to life. i can now telnet and ssh and ping my VSF stuck back and forth.

    Thanks alot team.

    Brian





  • 9.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    Posted Aug 12, 2021 01:42 PM
    Hi Team,

    Thanks, a lot guys for all your positive contribution, i eventually discovered that i didn't specify source IP(telnet Server Ip) after running "sho ip ssh' command as follows:

    MyAruba(config)# sh ip ssh

      SSH Enabled     : Yes                 Secure Copy Enabled : No
      TCP Port Number : 22               Timeout (sec)       : 120
      Rekey Enabled   : No                  Rekey Time (min)    : 60
                                            Rekey Volume (KB)   : 1048576
      Host Key Type   : RSA                 Host Key/Curve Size : 2048

      Ciphers :
    L5Z13(config)# sh ip ssh

      SSH Enabled     : Yes                 Secure Copy Enabled : No
      TCP Port Number : 59987               Timeout (sec)       : 120
      Rekey Enabled   : No                  Rekey Time (min)    : 60
                                            Rekey Volume (KB)   : 1048576
      Host Key Type   : RSA                 Host Key/Curve Size : 2048

      Ciphers : #######################################
      MACs    : $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

      Ses Type     | Source IP                                      Port
      --- -------- + ---------------------------------------------- -----
      1   console  |
      2   telnet   |
      3   inactive |
      4   inactive |
      5   inactive |
      6   inactive |
      MACs    : $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

      Ses Type     | Source IP                                      Port
      --- -------- + ---------------------------------------------- -----
      1   console  |
      2   telnet   |
      3   inactive |
      4   inactive |
      5   inactive |
      6   inactive |

    After i declared source IP, then all came to life. i can now telnet and ssh and ping my VSF stuck back and forth.

    Thanks alot team.

    Brian





  • 10.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    Posted Aug 12, 2021 11:34 PM
    Hi Team,

    Thanks, a lot guys for all your positive contribution, i eventually discovered that i didn't specify source IP(telnet Server Ip) after running "sho ip ssh' command as follows:

    MyAruba(config)# sh ip ssh

      SSH Enabled     : Yes                 Secure Copy Enabled : No
      TCP Port Number : 22               Timeout (sec)       : 120
      Rekey Enabled   : No                  Rekey Time (min)    : 60
                                            Rekey Volume (KB)   : 1048576
      Host Key Type   : RSA                 Host Key/Curve Size : 2048

      Ciphers :
    L5Z13(config)# sh ip ssh

      SSH Enabled     : Yes                 Secure Copy Enabled : No
      TCP Port Number : 59987               Timeout (sec)       : 120
      Rekey Enabled   : No                  Rekey Time (min)    : 60
                                            Rekey Volume (KB)   : 1048576
      Host Key Type   : RSA                 Host Key/Curve Size : 2048

      Ciphers : #######################################
      MACs    : $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

      Ses Type     | Source IP                                      Port
      --- -------- + ---------------------------------------------- -----
      1   console  |
      2   telnet   |
      3   inactive |
      4   inactive |
      5   inactive |
      6   inactive |
      MACs    : $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

      Ses Type     | Source IP                                      Port
      --- -------- + ---------------------------------------------- -----
      1   console  |
      2   telnet   |
      3   inactive |
      4   inactive |
      5   inactive |
      6   inactive |

    After i declared source IP, then all came to life. i can now telnet and ssh and ping my VSF stuck back and forth.

    Thanks alot team.

    Brian





  • 11.  RE: Cannot Telnet, Ping or SSh access the Aruba 2930F VSF stuck

    Posted Aug 16, 2021 04:19 AM
    Hi, let's try to get a sequence
    1. Is there a ping from the core to the access switch? which IP does the core have in the MGMT network,
    which IP has the switch in the MGMT network, VLAN ID checked on the uplink?

    2. Is only routed on the core switch or between access and core If routing is only performed on the
    core switch (access purely L2 switches).
    Then the def. GW set & not a def. Route!!!
    with routing on the switch
    ip default route 0.0.0.0/0.0.0.0 10.225.145.1
    with only L2 switch
    ip default gateway 10.225.145.1
    Test first Ping from core to access
    Ping from PC to access (with core as GW)
    SSH / Telnet from the core
    SSH / Telnet from the PC


    Thomas

    ------------------------------
    Thomas Ley
    ------------------------------