I want to enable SSH access to my switches and disable telnet access. Do I need to allow telnet access still from my CiscoWorks LMS server or will the LMS server be able to carry out all necessary tasks with telnet disabled.
We also have an ACS server authenticating and authorizing. I am assuming then that if I enable SSH, when specifying the device attributes the following settings will be OK:
Basically then, with telnet disabled on the switches and SSH enabled, when LMS attempts to perform an operation that requires a login session to the switch it will use my TACACS specified username and password to gain SSH access (Is that correct ?).
I have now enabled SSH on one of my switches (and disabled telnet access) and it seems to be working OK. RME can still download config files from this switch. I am wondering however if disabling telnet will affect any othere neccesary tasks that LMS needs to perform . I have tested the device atributes that I have configured against this switch and now the TACACS, TACACS Enable and Local User attributes all fail the test. I presume this is because the test is being performed using telnet.
I seem to be having a problem with software distribution. I get a an error specifying that RME could not connect using Telnet. I can see no option to use SSH under Administration > Software Management > Preferences (only an option to "Use RCP for image transfer (When applicable) ").
Could it be that the software distribution part of RME needs to have telnet enabled or perhaps I´m missing a config option for SSH.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...