Cisco Security :: Change Default SSH Port On Cat 6500 WS-SUP720-3B?
Jul 17, 2011
I have been net searching this question and I find answers relative to other Cisco products but not for the 6500 series. We are running entservicesk9_wan-mz.122-18.SXF17a.bin and would like to know how to change the default SSH listening port..
I have 2x v10000 Websense Security Gateways that are connected to 2x 6500 SUP720. When I turn on cluster management function between Websense appliance, they speak to each other only if they are connected in the same 6500. When they are connected one in every 6500 cluster management does not work. They are connected on the same physical vlan. Do I need multicast to be configured in the 6500 switches?
I can SSH from the internet to my ASA on default port 22, directly to my public IP. I can SSH from the internet to my Cisco 1841 on port 2001. I can not however, SSH to my Cat 2960. From what i can tell, on the Cat2960 i can't change the default port 22 for SSH to different port, just like i did on the Cisco 1841. I looked to see if I can change the default port for SSH on he ASA, it does not look like this is an option.
The bottom line is that i want to be able to SSH to all three devices from the internet. I only have one public IP. As of now, what i can do is only SSH to the ASA on default port 22 directly to the public IP and Cisco 1841 on port 2001. It appears that changing the default SSH port on Cat 2960 is not an option. It also appears that I can't change the default SSH port on the ASA, if i could, i would and then i should be able to SSH to the Cat 2960 on port 22. No matter what i did on the ASA, it always listens on port 22 for SSH connections.
show asp table socket TCP 001f549f <<pub IP>>:22 0.0.0.0:* LISTEN
how do i make it listen on different port?
Here is relevent config for SSH for cisco 1841 (port forwarding)
Cisco 6500 Sup720-3B SPA IOS SXI - GRE tunnel will not come up.It worked fine on SXF code, but the crypto map can not be applied on tunnel interface.The iskmp is up with the OM_IDLE The crypto give it a Cryto UP, the the Tunnel does not come up. It is UP down.Does some one have a working config with a 6500 IOS SXI Train with GRE IPSEC Tunnel?
I have problem with the standby supervisor in 6500 vss and need to replace the supervisor. I have follow how-to on the cisco web site url...
But when i boot the new standby sup720 it comes active and both supervisors is rebooting. I wonder if i can do the replacement without rebooting both active and standy supervisor.
I will be installing a secondary SUP720 in a 6509-E and will be upgrading the IOS on the existing SUP which is on 122-18.SXF6. I've read that this release has passed End of Critical Maintenance earlier this you. I thinking of upgrading the IOS to 12.2.33-SXJ1(ED) or 12.2.33-SXI8(ED) (possible more stable), but i'm not sure if i need any step upgrades from the current version. The SUP meets the required hardware specs and I will also be upgrading the ROMMON to 12.2(17r)SX7 first.
I have alot of experience upgrading IOS on routers and switches, but i just need to now if there are any gotchas that i need to know for the upgrade on the SUP.
The other issue is i don't believe the current IOS has been installed, are there any issue running on an IOS not installed. Patching is not available since the system is not running from an installed image. To install please use the "install file" command.
if it is possible to recover a Cat 6500 that has no code on bootflash from ROMMON, and is it mandatory to have a compact flash card to do the recovery ? or can one use xmodem or TFTP ?
I have a situation where a customer doesn't have the required power units installed in their 6500 for me to provision a WiSM2.They use a VSS pair with a single Sup720 in each. They have no intention of adding a second Sup to each chassis.
I need to justify why they can't use slot 6 (which has power reserved) if I am to get them to upgrade the PSU's. The documentation I've found says it is supported but not recommended.
Cisco Catalyst 6509 with Sup720-10GE IOS 12.2(33)SHX7. There are around 30 L3 vlans configured on the switch. I'm only interested for the traffic on one L3 vlan which is the connection to wan cloud.
I wanna see only the traffic that goes to and come from the wan. On other Catalyst where I have routed interfaces i successfully configured netflow. I read a lot in the forums and documentations but i didn't find the right one.
We recently purchased 2 Cisco 6500 series switches (with Sup 2T). These switches will be replacing our old 2 6500 series switches (with Sup 720).
We have 70 vlans and 90+ closet switches (2900) connecting the core switches We have 2 WLC connected to the core switch. We also have a 1 x 1 connection to a VSS switch which in turn connects to our Server Co-Location data center utilizing IPSec & GRE tunnel to connect to our Server Co-Location data center.
Our routing protocol is EIGRP. Our VTP domain at Server Co-Location is separate from our location “A” campus. I was wondering what is the best way to migrate our Core switches at location “A” campus.
The requirement is we would like to replace these switches with minimum downtime.
ASA 5510 security plus edition will it support active/active failover. and does it support context with securiyt plsu edition. and how many default context do we get with asa 5510 security plus edition.
I have one Catalyst 6509E chassis and two SUP720. The bootup sequence on SUP 720 (standby hot) failed . Messages that appear on SUP 720, on the console port indicate o software crash. I don't have a flash card in SUP720.
This is the bootup process:
System Bootstrap, Version 8.5(3) Copyright (c) 1994-2008 by cisco Systems, Inc. Cat6k-Sup720/SP processor with 1048576 Kbytes of main memory
6500 - version (s72033_rp-ENTSERVICESK9_WAN-M), Version 12.2(18)SXF17a.I have two ISP's. I have created two defaults as follow & secondary route does not work. [code] After disabling the interface to ISP1, backup routes does not work. [code]
Since the ACE supports only static routing, when pointing a default route from the ACE what is your preferred method when using multiple 6500s with an ACE in each in a failover scenario to prevent just pointing at one 6500? Static route to an HSRP address? Multiple static routes on the ACE, etc?
On the supervisor card of a cisco 6500 series, according to the following link, [URL] it only has 2 uplink ports on the card. Would I be correct in assuming that I only have those to ports that I can configure IP addresses on?
The cisco that is being devlivere is coming with a 48 port switch and 24 port fibre switch. Could I change any of those ports into a router port and configure IP addresses on those?
The supervisor card is a ws-sup-720-3b the 48 port switch is a ws-x6748-ge-tx the 24 port fibre switch is ws-x6724-sfp
I'm trying to change the default name on my Sky router but when I try a pop up from Windows security is asking for my username and password which I don't have as I never set one up in the first place! is this the default password from Sky, Admin- Sky that I need to use?
The network gods recently updated our 6500 and upon reboot, the FWSM booted to CF:1 maintence partition,which caused an immediate outage. On the router, I ran the following command to set the default FWSM boot partition to the configuration with:Router#boot device module 4 cf:5 However, it appears the "show boot device" command has been replaced with "show bootvar" which doesn't show me which partition the router will boot the FWSM to. Is there a command I can run from the Router that will actually confirm the boot partition for the FWSM if the router reloads.
some of the features of 6500 are enabled by default and woudn't appear in the "Show run". See the command below and how do I make sure whether these featues are enabled by default or not. Would it appear in the config if enabled?
ip verify unicast source reachable-via rx ip verify unicast source reachable-via any
storm-control broadcast level 70
what are the difference between the commands below and can they be enabled together.
spanning-tree guard root vs spanning-tree loopguard default vs spanning-tree guard loop
I rdp into our server 2008 via IP. This is a router on ip 0.1, this is forwarded to my server on IP 0.3. This server was setup with DHCP default gateway of 0.1. We added a new outside connection on IP 0.2. I was talked through the changes so that internal DHCP requests went to gateway IP 0.2 but RDP still used 0.1. I plan on getting rid of 0.1.Where is the setting to change the RDP to use default gateway of 0.2?
I recenly installed LMS 4 on a windows 2008 R2 system , I didnt change the default configuration of windows or ciscoworks.I just added devices and configured basic things on the LMS system .when I open ciscoworks on the server itself it starts a browser session on http port 1741 and then changes automatically to https even though the default config is browser security disabled on ciscoworks.I try to open a browser session on a mgmt station to the cisco server , it didnt work in https ( I did get the login screen but couldnt log on , probablly something to do with the certificate ) , so I open http on port 1741 and it worked , I was able to log in .After a few Hours for some strange reason I didnt have access any more from the mgmt station not in http nor in https , the only way was to access it from the server itself.I went and changed the default setting of the secure browser on LMS 4 hopping that would work , I was asked to restart the ciscoworks service for the changes to take affect , I tried to restart it but it was unsuccesful so I restart the whole server. when it came up ciscoworks didnt work most services didnt start ( like the web server ,tomcat and all the manual services and ciscoworks deamon)
I would like the ability to change the default password. Currently, when I change the default password and save the config via the web interface, neither the original password, or the new password work. I am forced to reset the device to the default config to regain access to the device.
I have Cisco 800 series (888w) with BRI-ISDN port. Is there any way to change the usage of ISDN port to normal RJ45 port?I want to use this SOHO router to sharing connection.
i forgot to change the default username and password of 1941 router. I have alos performed WR memory on router. When i am trying to recover it through ROMMON mode i am not getting the initial configuration Dialouge through which i can change the password . I have gone through all documents available through internet for recovering the same but unable to recover it.
Ive changed the IP address of a laptop to connect to the router with IP 192.168.15.1 but now want to change the router IP address from the defaul to another subnet, so that it is accessable with other workstations on the LAN, but I could not readily find the option to set the Ip address on the router.
I'm signed in with user admin.
I also wanted to add addiontal users. The help indicates there is a User List Add Entry option but from the Administration bar, the left hand menu option shows User Management & User Privileges options. On User Management, it is possible to change the 2 default user names, but I wanted to leve them and create new ones.