Comware Based
cancel
Showing results for 
Search instead for 
Did you mean: 

SSH only access messes up cluster command on 4200G

dewi.griffiths
Occasional Visitor

SSH only access messes up cluster command on 4200G

So we've been trying to secure our network infrastructure of 4200G and 5500G switches. We have managed to setup ssh so we can ssh into the controller switches and members. We have disabled telnet to avoid any rogue sniffing.

Unfortunately, the cluster switch-to command does not appear to work in this configuration. I can't find any documents on how to get this to work.



Any help would be much appreciated.

7 REPLIES
MAIQUES
Occasional Advisor

Re: SSH only access messes up cluster command on 4200G

Hi,

I have the same problem.

I use Putty and the connexion is refused by the switch with message The connection is closed by SSH Server

Current FSM is SSH_Main_SSHProcess"



Thanks for your help
wolfgangB
Occasional Advisor

Re: SSH only access messes up cluster command on 4200G

@MAIQUES:

the ssh server is not configured correctly. You have to create BOTH RSA and DSA keys, create an ssh user (like 'admin'), set his capabilities to at least 'ssh' (I often use 'all) and the auth.type to e.g. 'password'. Then it will work.



Believe me, I have fiddled around with this for a long time. It is not as easy as it could be.



w-b

MAIQUES
Occasional Advisor

Re: SSH only access messes up cluster command on 4200G

Hi,

thanks for your help. I find documentation 3com to configure SSH on router. Now i believe that i can configure SSH.

I tell you when i finishe it.

Thanks.

dewi.griffiths
Occasional Visitor

Re: SSH only access messes up cluster command on 4200G

And you've verified that this works with the "cluster switch-to" command when you have multiple switches clustered together? We were able to get ssh working OK, but the cluster environment doesn't work correctly.

MDella
Advisor

Re: SSH only access messes up cluster command on 4200G

So I have a similar problem. I'm working with an A5800 switch (JC105A specifically) with Comware Version 5.20, Release 1211P01.....

 

So I have verified that I have BOTH the RSA and DSA keys

 

display public-key local rsa public

display public-key local dsa public

 

However typically within about 30 seconds of idle time, I'll get:

 

<SC9-A07-SW>Received disconnect from 172.24.192.247: 2: The connection is closed by SSH Server
  Current FSM is SSH_Main_SSHProcess
[mdella@catalyst home]$

 

I have several of these A5800's that exhibit the same symptoms. Some switches more often than others. But I have no clue where to begin looking for the answer to this one...

 

Marcos

 

Mystray
Occasional Contributor

Re: SSH only access messes up cluster command on 4200G

Found same problem on A5800 (JC100A Comware Software, Version 5.20, Release 1211P09)

(yes, this problem still exists after years)

Looks like ssh server dont process ssh keepalive packets, so need to disable "ServerAliveInterval" option in your ssh client for this switches.

qqruzo
Occasional Visitor

Re: SSH only access messes up cluster command on 4200G

Download lasl version of putty.