SSH question 6509 hybrid

Unanswered Question
Feb 10th, 2008

If we turn off telnet on both the layer 2 side catos and the layer 3 msf side will we still be able to session up to the layer 3 side from the layer 2 side . I do not see any kind of SSH command on the catos side nor is it part of the "session" command . Is this just considered an internal session and will get to the msf ok even though we have telnet disabled ? I always thought the session command was a telnet command internally. I will probably try it on a lab box to see but I was just wondering if anyone knew ?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Richard Burts Sun, 02/10/2008 - 19:15


I do not have an authoritative answer and testing in the lab is certainly what you need to do. But I would be very surprised if turning off telnet impacted the ability to session from the switch side to the MSFC. It does feel a bit like a telnet connection but I believe that it is a separate kind of connection.

When you do test it please post back so that we know the real answer.



glen.grant Mon, 02/11/2008 - 04:33

Thanks Edison ,not really what I wanted to hear and I'll still test it out . You would think there would be something code wise that would take SSH into account.

glen.grant Mon, 02/11/2008 - 05:04

Here's the definitive answer , the answer is if you just enable SSH on both the mls layer2 side and the msf layer 3 side and you restrict telnet with the transport input SSH command , it does break your ability to session into the layer 3 side from the catos side. Not happy about that , means if you if have to work on both sides you have to have 2 separate sessions going to to the work . if you try to session you will get this message,

Console> (enable) ses 15

Trying Router-15...

session: Unable to tunnel to Router-15 (57)

Richard Burts Mon, 02/11/2008 - 05:24


Thanks for testing and providing a definitive answer. Rated as deserved.



Edison Ortiz Mon, 02/11/2008 - 07:41


Pretty much identical from the posting at GroupStudy 5 years ago :)

No much has changed on good old CatOS ...

Good job testing this not-well documented feature.


This Discussion