SSH access for switch management

[frobineau]

Hi,

I have an OS 6350-p24 that has been reset to its initial configuration, so it's in a pretty vanilla state.

I have managed to enable console access, and now I'm trying to enable SSH access so that the switch can be managed without a clunky serial cable.

Here are the commands I have run so far on the console:

Code: Select all

Welcome to the Alcatel-Lucent OmniSwitch 6350
Software Version 6.7.2.49.R01 GA, March 31, 2017.

Copyright(c), ALE USA Inc., 2017. All Rights reserved.

OmniSwitch(TM) is a trademark of Alcatel-Lucent Enterprise registered
in the United States Patent and Trademark Office.

-> password
Enter old password:   ******
Enter new password:   ***********
Reenter new password: ***********
-> aaa authentication ssh local
-> session timeout cli 10
-> session login-attempt 10
-> no aaa authentication telnet
-> ssh enable
-> ip service ssh
-> no ip service telnet
-> show ssh config
SSH = Enabled
SCP/SFTP = Enabled
Public Key Authentication Enforced = False
TCP-Port Number = 22

-> show ip service

  Name                   Port   Status
----------------------+-------+---------
  ftp                      21   enabled
  ssh                      22   enabled
  telnet                   23   disabled
  udp-relay                67   enabled
  http                     80   enabled
  network-time            123   enabled
  snmp                    161   enabled
  secure-http             443   enabled

Ok, so SSH seems to be enabled, but how do I actually ssh into the switch? Where do I see / configure an IP address for the switch? Do I have to create a VLAN for it?

I tried creating a Loopback0 interface with an IP address of my choosing, but I still couldn't SSH into the switch after this:

Code: Select all

-> ip interface Loopback0 address 192.168.1.30
-> show ip interface
Total 2 interfaces
             Name                   IP Address     Subnet Mask   Status Forward  Device
--------------------------------+---------------+---------------+------+-------+--------
Loopback                         127.0.0.1       255.0.0.0           UP      NO Loopback
Loopback0                        192.168.1.30    255.255.255.255     UP     YES Loopback0

What am I missing? Are there some concepts I'm completely missing to understand what's going on? I should mention that this is my first managed switch, so I'm very much in a learning phase.

Thanks!

For what it's worth, here's the output of a few other commands that I thought could be relevant:

Code: Select all

-> show vlan
                              stree                 mble   src
 vlan  type  admin   oper   1x1   flat   auth   ip   tag   lrn   name
-----+-----+------+------+------+------+----+-----+-----+------+----------
   1    std   on     on     on    on     off   off   off     on   VLAN 1

-> show ip interface
Total 1 interfaces
             Name                   IP Address     Subnet Mask   Status Forward  Device
--------------------------------+---------------+---------------+------+-------+--------
Loopback                         127.0.0.1       255.0.0.0           UP      NO Loopback

-> show configuration snapshot
! Stack Manager :
! Chassis :
system name Switch6350
system timezone MET
system daylight savings time disable
! Configuration:
! VLAN :
vlan 1 enable name "VLAN 1"
! VLAN SL:
! IP :
ip service ftp
ip service ssh
no ip service telnet
ip service udp-relay
ip service http
ip service network-time
ip service snmp
ip service secure-http
! IPMS :
! AAA :
aaa authentication ssh "local"
! PARTM :
! 802.1x :
! QOS :
! Policy manager :
! Session manager :
session timeout cli 10
session login-attempt 10
! SNMP :
! RIP :
! IPv6 :
! IP multicast :
! IPRM :
! RIPng :
! Health monitor :
health threshold memory      90
health threshold temperature 78
! Interface :
! Udld :
! Port Mapping :
! Link Aggregate :
! VLAN AGG:
! 802.1Q :
! Spanning tree :
bridge mode 1x1
! Bridging :
! Bridging :
! Port mirroring :
! UDP Relay :
! System service :
swlog console level info
! SSH :
! Web :
! AMAP :
! Lan  Power :
! NTP :
! RDP :
! VLAN STACKING:
! EFM-OAM :
! SAA :
! Loopback-detection :
! ERP :
! TEST-OAM :
! DHL :
! LLDP :
! DHCP Server :
! Stack Split-Protection Helper :
! Openflow :
! DHCPv6 :
! TWAMP :

[frank]

try

Code: Select all

aaa authentication ssh default

instead of local

[silvio]

you have to configure the ip address for vlan 1. f.e.
ip interface IF1 address x.x.x.x/24 vlan 1
regards
Silvio