Network Management

Hello,

 

I just configured an Aruba 5412R. But SSH or telnet are not working.

 

I generated the SSH key and enabled SSH. . I have configured the username and password for manager and operator as well. The IP I am trying to SSH to is the vlan 80 IP address. Am I missing a command or forgetting something. Below is my config. ANy help is appreciated. Thanks!

 

PBM-ARUBA-SWITCH# show run

Running configuration:

; J9851A Configuration Editor; Created on release #KB.16.05.0007
; Ver #12:08.1d.fb.7f.bf.bb.ff.7c.59.fc.7b.ff.ff.fc.ff.ff.3f.ef:f6
hostname "PBM-ARUBA-SWITCH"
module A type j9990a
module D type j9986a
module E type j9986a
module F type j9986a
module G type j9986a
module H type j9986a
module I type j9986a
module J type j9986a
module K type j9986a
module L type j9986a
console idle-timeout 300
console idle-timeout serial-usb 300
telnet-server listen data
web-management listen data
ip ssh listen data
ip ssh rekey
ip route 0.0.0.0 0.0.0.0 172.16.80.1
snmp-server community "public" unrestricted
snmp-server listen data
snmp-server contact "Lionel Galvan 972-966-7215" location "PBM-Closet"
oobm
disable
no ip address
exit
vlan 1
name "DEFAULT_VLAN"
no untagged A1-A20
untagged
A21-A24,D1-D24,E1-E24,F1-F24,G1-G24,H1-H24,I1-I24,J1-J24,K1-K24,L1-L24
no ip address
exit
vlan 80
name "PBM-VLAN-80"
untagged A1-A20
tagged A21-A22
ip address 172.16.80.5 255.255.255.0
exit
vlan 100
name "Management"
no ip address
exit
management-vlan 100
spanning-tree
allow-unsupported-transceiver
no tftp server
tftp server listen data
no autorun
no dhcp config-file-update
no dhcp image-file-update
password manager
password operator

PBM-ARUBA-SWITCH# show ip ssh

SSH Enabled : Yes Secure Copy Enabled : No
TCP Port Number : 22 Timeout (sec) : 120
Rekey Enabled : Yes Rekey Time (min) : 60
Rekey Volume (KB) : 1048576
Host Key Type : RSA Host Key/Curve Size : 2048

Ciphers : aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,
aes192-cbc,aes128-ctr,aes128-cbc,3des-cbc
MACs : hmac-sha1-96,hmac-md5,hmac-sha1,hmac-md5-96

Ses Type | Source IP Port
--- -------- + ---------------------------------------------- -----
1 console |
2 inactive |
3 inactive |
4 inactive |
5 inactive |
6 inactive |
7 inactive |

PBM-ARUBA-SWITCH#

Unset the management VLAN. This will restrict SSH only from VLAN100.
If you want to restrict access you ip authorized manager command.

Hi Willen,

 

Do yo know what the command is to unset the MGMT vlans ?

 

Do I need to do anything to vlan 80 so it can accept SSH connections?

 

Thanks!

Just the command “no management-vlan”.