topic Brocade Telnet problem in HPE EVA Storage

Brocade Telnet problem

Sajeev2007 — Fri, 24 Aug 2007 15:25:16 GMT

Hi All,

I can telnet to some brocade switches, but i can't telnet into some others. any idea why ?

thanks

Re: Brocade Telnet problem

Ivan Ferreira — Fri, 24 Aug 2007 19:45:25 GMT

Firewall?

Brocade telnet service can be disabled. You should try with SSH instead.

Re: Brocade Telnet problem

Denver Osborn — Sat, 25 Aug 2007 14:21:25 GMT

When you attempt to telnet to the san switch, what error do you get? Do you get "connection refused" or "this switch is already engaged?"

If there's an existing telnet session from another admin, close the active session and try again. You can also attempt to close a telnet session from the front panel of the switch. if it has a front led panel like on the silkworm 2800... I don't remember how to navigate to the "close telnet" option though.

If none of the above works, reset the switch when you're able to take it offline. If you have a web tools license for the switch, open the web interface to do admin until you're able to free up the telnet session.

hope this helps,
-denver

Re: Brocade Telnet problem

Sajeev2007 — Sun, 26 Aug 2007 07:07:47 GMT

it says cant connect port 23 blocked.

how do i open telnet on the switch ?

thanks

Re: Brocade Telnet problem

Stephen Kebbell — Mon, 27 Aug 2007 01:02:55 GMT

Hi,

then it is either your firewall (if one is between your PC and the switch), or else the telnet daemon is deactivated on the switch. To re-enable it, you should open an SSH-Session to the switch (use Putty), and run the configure command.
You will see something like this:

switch:admin> configure

Not all options will be available on an enabled switch.
To disable the switch, use the "switchDisable" command.

Configure...

System services (yes, y, no, n): [no] y

rstatd (on, off): [off]
rusersd (on, off): [off]
telnetd (on, off): [on]
** this might be set to "off" for you, so change it to "on ****

ssl attributes (yes, y, no, n): [no]
http attributes (yes, y, no, n): [no]
snmp attributes (yes, y, no, n): [no]
rpcd attributes (yes, y, no, n): [no]
cfgload attributes (yes, y, no, n): [no]
webtools attributes (yes, y, no, n): [no]

Only change the option for telnetd, the rest you leave as they are (press enter)

If you cannot connect via SSH, then you will need to connect via the serial port.

Regards,
Stephen

Re: Brocade Telnet problem

tkc — Mon, 27 Aug 2007 01:36:44 GMT

try directly connect to the switch using a cross cable to your notebook. if it works, problem is likely your firewall settings.

Re: Brocade Telnet problem

Sajeev2007 — Wed, 29 Aug 2007 13:07:05 GMT

i am able to SSH into it. if i enable telnet using the configure command, will it reboot the switch afterwards ?

Re: Brocade Telnet problem

Rob Leadbeater — Wed, 29 Aug 2007 13:43:06 GMT

I wouldn't have thought so... The help system on the switch will probably tell you for certain.

Before you reconfigure telnet, you should probably determine why it has been disabled. Many organisations disable telnet because of the ease in which passwords can be sniffed over the network...

Cheers,

Rob

Re: Brocade Telnet problem

Stephen Kebbell — Thu, 30 Aug 2007 04:46:16 GMT

You can change the setting for the telnet daemon online. You don't need to disable or reboot the switch.

I just did it on a 3900 switch, works fine.
Regards
Stephen

Re: Brocade Telnet problem

Stephen R Kennedy — Thu, 11 Oct 2007 12:53:44 GMT

I have just upgraded a SAN Switch 4/16 to firmware version 5.30.a and now I cannot disable telnet. I tried the method outlined in the Fabric OS 5.3.0 administrator guide but it does not work. Configure telnetd returns a usage error. And when I try the other options, as listed on page 89, telnetd is never a selection. Any ideas?

Re: Brocade Telnet problem

Darcy_7 — Sat, 12 Jan 2008 20:26:20 GMT

from the 5.3.0 release notes

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c01292810/c01292810.pdf

page 9

Starting with Fabric OS version 5.3.0, you can use the ipfilter command
to block unauthorized Telnet access. The option to disable Telnet using the
configure command is no longer available.
Use the following command to create a policy to block Telnet access to any station:
ipfilter --create blockTelnet -type ipv4 ipfilter
--addrule blockTelnet -sip any -dp 23 -proto tcp -act deny
ipfilter -- activate blockTelnet
Use the following command to restore default policies for IPv4:
ipfilter --activate default_ipv4 --
See the Fabric OS 5.3.0 command reference guide for more information on the
ipfilter command.