[c-nsp] VTY PROBLEM
Aftab Siddiqui
aftab.siddiqui at gmail.com
Wed Jun 23 05:25:25 EDT 2010
Yes, it worked. No more stuck session. Thanks Alex.
Regards,
Aftab A. Siddiqui
On Wed, Jun 23, 2010 at 2:16 PM, Alexandre Snarskii <snar at snar.spb.ru>wrote:
> On Wed, Jun 23, 2010 at 01:44:39PM +0500, Aftab Siddiqui wrote:
> > same issue here,
> >
> > Line User Host(s) Idle Location
> > 194 vty 0 idle 19w2d 201.240.122.39
> > 195 vty 1 idle 17w1d 41.196.124.99
> > 196 vty 2 idle 16w4d 94.50.81.100
> > 197 vty 3 idle 17w0d 59.182.12.209
> > 198 vty 4 idle 2w5d 189.27.86.223
> > 199 vty 5 idle 1w0d 41.178.188.74
> >
> > Platform 1841
> > IOS: c1841-advipservicesk9-mz.124-13b.bin
> >
> > clear tcp line vty 0
> >
> > The above command doesn't work.
>
> You may try to 'clear tcp tcb NNNNN', as described here:
>
> http://www.gossamer-threads.com/lists/cisco/nsp/98894
>
> >
> >
> > Regards,
> >
> > Aftab A. Siddiqui
> >
> >
> > On Wed, Jun 23, 2010 at 1:32 PM, bha Qaqish <bha.Qaqish at nitc.gov.jo>
> wrote:
> >
> > > I tried it.
> > > Same thing , the session still exist
> > >
> > > Eng. Bha Qaqish
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: Pepa Verich [mailto:Josef.Verich at cesnet.cz]
> > > Sent: Wednesday, June 23, 2010 10:35 AM
> > > To: bha Qaqish
> > > Subject: Re: [c-nsp] VTY PROBLEM
> > >
> > > Did you try command "clear TCP line vty X" ?
> > >
> > > Key word "TCP" is very important.
> > >
> > >
> > > Pepa
> > >
> > >
> > > Dne 23.6.2010 7:37, bha Qaqish napsal(a):
> > > > I did it several times but did not do anything
> > > >
> > > > Eng. Bha Qaqish
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: David Prall [mailto:dcp at dcptech.com]
> > > > Sent: Tuesday, June 22, 2010 11:13 PM
> > > > To: bha Qaqish; 'Jeff Wojciechowski'; cisco-nsp at puck.nether.net
> > > > Subject: RE: [c-nsp] VTY PROBLEM
> > > >
> > > > Do a "who" and see who has a hold of it. Then put an acl on the
> ingress
> > > > interface so deny it in and out. Your exec-timeout should eventually
> kick
> > > it
> > > > off. If not, at least they won't be able to connect again. I'd also
> do
> > > > "clear line 3" and confirm a couple of times.
> > > >
> > > > David
> > > >
> > > > --
> > > > http://dcp.dcptech.com
> > > >
> > > >
> > > >> -----Original Message-----
> > > >> From: bha Qaqish [mailto:bha.Qaqish at NITC.gov.jo]
> > > >> Sent: Tuesday, June 22, 2010 3:17 PM
> > > >> To: David Prall; 'Jeff Wojciechowski'; cisco-nsp at puck.nether.net
> > > >> Subject: RE: [c-nsp] VTY PROBLEM
> > > >>
> > > >> It's the same , not cleared
> > > >>
> > > >> Eng. Bha Qaqish
> > > >>
> > > >>
> > > >>
> > > >>
> > > >> -----Original Message-----
> > > >> From: David Prall [mailto:dcp at dcptech.com]
> > > >> Sent: Tuesday, June 22, 2010 10:14 PM
> > > >> To: bha Qaqish; 'Jeff Wojciechowski'; cisco-nsp at puck.nether.net
> > > >> Subject: RE: [c-nsp] VTY PROBLEM
> > > >>
> > > >> Should be "clear line 3"
> > > >>
> > > >> David
> > > >>
> > > >> --
> > > >> http://dcp.dcptech.com
> > > >>
> > > >>
> > > >>> -----Original Message-----
> > > >>> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> > > >>> bounces at puck.nether.net] On Behalf Of bha Qaqish
> > > >>> Sent: Tuesday, June 22, 2010 2:48 PM
> > > >>> To: Jeff Wojciechowski; cisco-nsp at puck.nether.net
> > > >>> Subject: Re: [c-nsp] VTY PROBLEM
> > > >>>
> > > >>> Yes
> > > >>> I can see the session in this command , and when I make the clear
> > > >> line
> > > >>> vty 3 for example , its not cleared. It still exist in the show
> > > >>> command
> > > >>>
> > > >>> Eng. Bha Qaqish
> > > >>>
> > > >>>
> > > >>> -----Original Message-----
> > > >>> From: Jeff Wojciechowski [mailto:
> Jeff.Wojciechowski at midlandpaper.com]
> > > >>> Sent: Tuesday, June 22, 2010 9:44 PM
> > > >>> To: bha Qaqish; cisco-nsp at puck.nether.net
> > > >>> Subject: RE: VTY PROBLEM
> > > >>>
> > > >>> Can you see the session using show line and then clear line X
> (where
> > > >> X=
> > > >>> line number of stuck VTY session)?
> > > >>>
> > > >>> -Jeff
> > > >>>
> > > >>> -----Original Message-----
> > > >>> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> > > >>> bounces at puck.nether.net] On Behalf Of bha Qaqish
> > > >>> Sent: Tuesday, June 22, 2010 1:27 PM
> > > >>> To: cisco-nsp at puck.nether.net
> > > >>> Subject: [c-nsp] VTY PROBLEM
> > > >>>
> > > >>>
> > > >>>
> > > >>>
> > > >>>
> > > >>> Dear
> > > >>> I have a 7206 VXR WITH npeg2, there is a problem, there is a telnet
> > > >> vty
> > > >>> sessions that stuck , I can not clear it , its stuck for 70 weeks ,
> I
> > > >>> can not restart the router cause we are an ISP, so how could I
> clear
> > > >>> the sessions , I have a --- exec-timeout 60 0 --- on the vty.
> > > >>> Please help ASAP
> > > >>>
> > > >>>
> > > >>> BR
> > > >>>
> > > >>>
> > > >>> Eng. Bha Qaqish
> > > >>>
> > > >>>
> > > >>>
> > > >>>
> > > >>>
> > > >>>
> > > >>>
> > > >>> *********************
> > > >>>
> > > >>> _______________________________________________
> > > >>> cisco-nsp mailing list cisco-nsp at puck.nether.net
> > > >>> https://puck.nether.net/mailman/listinfo/cisco-nsp
> > > >>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> > > >>>
> > > >>> _______________________________________________
> > > >>> cisco-nsp mailing list cisco-nsp at puck.nether.net
> > > >>> https://puck.nether.net/mailman/listinfo/cisco-nsp
> > > >>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> > > >
> > > >
> > > > _______________________________________________
> > > > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > > > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > > > archive at http://puck.nether.net/pipermail/cisco-nsp/
> > >
> > > _______________________________________________
> > > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > > archive at http://puck.nether.net/pipermail/cisco-nsp/
> > >
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>
More information about the cisco-nsp
mailing list