Brocade Telnet problem

[Sajeev2007]

Hi All,

I can telnet to some brocade switches, but i can't telnet into some others. any idea why ?

thanks

[Ivan Ferreira]

Firewall?

Brocade telnet service can be disabled. You should try with SSH instead.

[Denver Osborn]

When you attempt to telnet to the san switch, what error do you get? Do you get "connection refused" or "this switch is already engaged?"

If there's an existing telnet session from another admin, close the active session and try again. You can also attempt to close a telnet session from the front panel of the switch. if it has a front led panel like on the silkworm 2800... I don't remember how to navigate to the "close telnet" option though.

If none of the above works, reset the switch when you're able to take it offline. If you have a web tools license for the switch, open the web interface to do admin until you're able to free up the telnet session.

hope this helps,
-denver

[Sajeev2007]

it says cant connect port 23 blocked.

how do i open telnet on the switch ?

thanks

[Stephen Kebbell · Accepted solution]

Hi,

then it is either your firewall (if one is between your PC and the switch), or else the telnet daemon is deactivated on the switch. To re-enable it, you should open an SSH-Session to the switch (use Putty), and run the configure command.
You will see something like this:

switch:admin> configure

Not all options will be available on an enabled switch.
To disable the switch, use the "switchDisable" command.

Configure...

System services (yes, y, no, n): [no] y

rstatd (on, off): [off]
rusersd (on, off): [off]
telnetd (on, off): [on]
** this might be set to "off" for you, so change it to "on ****

ssl attributes (yes, y, no, n): [no]
http attributes (yes, y, no, n): [no]
snmp attributes (yes, y, no, n): [no]
rpcd attributes (yes, y, no, n): [no]
cfgload attributes (yes, y, no, n): [no]
webtools attributes (yes, y, no, n): [no]

Only change the option for telnetd, the rest you leave as they are (press enter)

If you cannot connect via SSH, then you will need to connect via the serial port.

Regards,
Stephen

[tkc]

try directly connect to the switch using a cross cable to your notebook. if it works, problem is likely your firewall settings.

[Sajeev2007]

i am able to SSH into it. if i enable telnet using the configure command, will it reboot the switch afterwards ?

[Rob Leadbeater]

I wouldn't have thought so... The help system on the switch will probably tell you for certain.

Before you reconfigure telnet, you should probably determine why it has been disabled. Many organisations disable telnet because of the ease in which passwords can be sniffed over the network...

Cheers,

Rob

[Stephen Kebbell]

You can change the setting for the telnet daemon online. You don't need to disable or reboot the switch.

I just did it on a 3900 switch, works fine.
Regards
Stephen

[Stephen R Kennedy]

I have just upgraded a SAN Switch 4/16 to firmware version 5.30.a and now I cannot disable telnet. I tried the method outlined in the Fabric OS 5.3.0 administrator guide but it does not work. Configure telnetd returns a usage error. And when I try the other options, as listed on page 89, telnetd is never a selection. Any ideas?

[Darcy_7]

from the 5.3.0 release notes


http://h20000.www2.hp.com/bc/docs/support/SupportManual/c01292810/c01292810.pdf

page 9

Starting with Fabric OS version 5.3.0, you can use the ipfilter command
to block unauthorized Telnet access. The option to disable Telnet using the
configure command is no longer available.
Use the following command to create a policy to block Telnet access to any station:
ipfilter --create blockTelnet -type ipv4 ipfilter
--addrule blockTelnet -sip any -dp 23 -proto tcp -act deny
ipfilter -- activate blockTelnet
Use the following command to restore default policies for IPv4:
ipfilter --activate default_ipv4 --
See the Fabric OS 5.3.0 command reference guide for more information on the
ipfilter command.