SSH Problem between VLAN's

[patrick coutinho]

I have a strange problem with ssh our here.

We have a particular HP UX 11.11 server called APPLE on a VLAN say 173.20.100.x We have other servers on say 172.20.200.x

I am able to ssh from servers on 172.20.100.x to APPLE (on the same VLAN). But i cannot ssh to APPLE from other VLAN's.

ANy idea what the problem could be. The network guys say they are not restricing access. Also i can telnet fine from other VLAN's to APPLE.

Thanks in advance.

Pat

[Alexander Chuzhoy]

You 'd probably get a better answer in HPUX forum.
Since you can telnet from other Vlans to APPLE-it doesn't sound like route problem.

It could be a result from firewall or service restriction.
I'd search for restriction entries in sshd config file or firewall config file.

[patrick coutinho]

Hi,

I thought i was on the HP UX forum.

Am attaching a debug file. first part is the debug run on the client.

second is on the server.

thanks

Pat

[patrick coutinho]

Sorry the server name is gentst1. i just called it ORANGE.

Need help. Please give me some clues. Can't figure this out. ssh FROM this server APPLE to another on another VLAN works fine. so i think the issue is with sshd (server) not ssh (client).

any clues on where to look will be priceless. Point will be assigned.

rgds

Pat

[Olivier Drouin]

post the output of

telnet yourserver 22

[patrick coutinho]

I did
telnet gentst1 22
output
--------
trying..
connected to gentst1.
escape character is '^]'.
SSH-2.0-OpenSSH_3.5pl

protocol mismatch
connection closed by foreign host
---------------------

rgds

Pat

[Alexander Chuzhoy]

what error does the client get when he tries to connect to the server?

[patrick coutinho]

hi

the client does not get any error. just does not connect. the ouput is in the file i have attached earlier.

rgds

pat

[Steven E. Protter]

Try the ssh with the -v option.

This is probably network address or subnetting problem, possibly in the route configuration.

You will have to trace it hop to hop until you find it. Elementary, Mr. Watson.

SEP

[patrick coutinho]

Hi everyone,

i have moved this issue into the right place at the HP UX forum.

Maybe that will help me a bit more.

Thanks to everyone.

rgds

pat

[peter demus]

Hello !

have You enabled the right protocol version 1 or 2 / 1 and 2 / 2 only on both SSH server clients ??

is ping working ??

bye peter

[patrick coutinho]

Hi Peter,

Thanks. The problem is solved. was an issue with the switch settings.

rgds

Pat