This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.
COURSE of the MONTH
15 days, 7 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
intermitent SSH connection to Cisco Router
Posted on 2011-02-25
Hi Experts,
I'm currently experiencing a very weird thing happening on my cisco router 3925. It seems that when I try to connect to the router via SSH, sometimes it connects and sometimes it just times out. Anyone out there experience a similar problem? Thanks in advance.
I'm currently experiencing a very weird thing happening on my cisco router 3925. It seems that when I try to connect to the router via SSH, sometimes it connects and sometimes it just times out. Anyone out there experience a similar problem? Thanks in advance.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3-
3
2- +2
10 Comments
no i can't, its for my work, i know it won't be much help if i can't post the config. i posted the question just ot get an idea on where i could start troubleshooting this problem.
>sometimes it connects and sometimes it just times out
Usually, if it connects at all, the configuration is correct.
During the times that it times out, the router could be CPU bound and simply cannot accept incomming connections. There could be a memory leak bug in the current IOS version...
Usually, if it connects at all, the configuration is correct.
During the times that it times out, the router could be CPU bound and simply cannot accept incomming connections. There could be a memory leak bug in the current IOS version...
do you have one internet connection or dual Internet (asymetrical routing, or routing convergance issues?).
An issue end to end from you and the router (Packet loss, high latency)
Congested link, etc.
An issue end to end from you and the router (Packet loss, high latency)
Congested link, etc.
When you say times out, do you mean that it does not connect to the router ( tecp timeout) or it connects but you can't enter your password?
When you try to connect to the router and you time out you should do a traceroute and ping the address you use to ssh to.
Keep a running ping in a window and keep trying to connect. See if the results change when you time out.
If your network pings and traceroutes do not change, then configure the router to log debug messages to flash (logging debug ), and turn on this debug command:
debug ip ssh client
Check the timestamps and see it the router sees the incoming ssh sessions.
When you try to connect to the router and you time out you should do a traceroute and ping the address you use to ssh to.
Keep a running ping in a window and keep trying to connect. See if the results change when you time out.
If your network pings and traceroutes do not change, then configure the router to log debug messages to flash (logging debug ), and turn on this debug command:
debug ip ssh client
Check the timestamps and see it the router sees the incoming ssh sessions.
one thing is for sure there are no packet loss as i check the counters in the interfaces, it shows 0 for all errors. this is a private IP circuit with dual-homed 3xT1 circuit.
i also don't think it would be an ios problem as we have already installed more than 500 sites using the same ios and this weird problem only exist for this one site.
management IP is pingable even at a continuous ping it doesn't drop.
it doesn't even proceed with asking me for a password, aaa tacacs is used for authentication. when i hit ssh -l username ip-address, it just comes as "blank" it doesn'st show disconnect, timeout or anything. nothing just happens and next line is blank.
thanks for the ideas guys, how about the CPU bound problem you mentioned? how can i check this?
i also don't think it would be an ios problem as we have already installed more than 500 sites using the same ios and this weird problem only exist for this one site.
management IP is pingable even at a continuous ping it doesn't drop.
it doesn't even proceed with asking me for a password, aaa tacacs is used for authentication. when i hit ssh -l username ip-address, it just comes as "blank" it doesn'st show disconnect, timeout or anything. nothing just happens and next line is blank.
thanks for the ideas guys, how about the CPU bound problem you mentioned? how can i check this?
As soon as you can get in, check
show proc cpu hist
Shows you a little graph of past hour, 24 hours, 72 hours and you can see if there are spikes of high utilization.
show proc cpu hist
Shows you a little graph of past hour, 24 hours, 72 hours and you can see if there are spikes of high utilization.
yes i did that already and it didn't show any high utilization or spikes. for now im scheduling maintenance and i'll probably run debug commands, any suggestion on what debug commands that could help me?
I would also include into your troubleshooting a packet capture of the issue you are having; what is happening at the packet level. Are the 2 endpoints completing the 3way-hand shake, what else is happening after the 3-way handshake if it is succeeding.
debug ip tcp packet x.x.x.x (host that you are trying to connect to)
debug ip ssh
debug arp
debug ip packet (Be careful with this one, I would recommend that you setup an access-list and specify only the hosts you will be troubleshooting
debug ip routing (This will monitor the routing table to check for flapping routes)
Run each debug separately.
Billy
debug ip tcp packet x.x.x.x (host that you are trying to connect to)
debug ip ssh
debug arp
debug ip packet (Be careful with this one, I would recommend that you setup an access-list and specify only the hosts you will be troubleshooting
debug ip routing (This will monitor the routing table to check for flapping routes)
Run each debug separately.
Billy
Featured Post
WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance.
A concise guide to the settings required on both devices
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses
Course of the Month15 days, 7 hours left to enroll
743 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.