[c-nsp] VTY PROBLEM

[Joseph Karpenko]

you can also use "clear tcp tcb <tcb-value>" (obtained from the
output of the "show tcp brief" command) to clear the socket or
SNMP[1] to clear hung connections.  ;)

[1] <http://www.cisco.com/en/US/tech/tk648/tk362/technologies_problem_troubleshooting09186a00802b93ef.shtml>


regards,

-- 

/karpenko

[*] on 2010.06.22-14:50:41 -0400, Justin M. Streiner
<streiner at cluebyfour.org> wrote:
> On Tue, 22 Jun 2010, bha Qaqish wrote:
> 
>> I have a 7206 VXR WITH npeg2, there is a problem, there is a
>> telnet vty sessions that stuck , I can not clear it , its stuck
>> for 70 weeks , I can not restart the router cause we are an
>> ISP, so how could I clear the sessions , I have a ---
>> exec-timeout 60 0 --- on the vty.
> 
> If a "clear line vty X", where X is the stuck VTY, does not
> work, your best and cleanest option will be to reload the
> router.  Can you still log into the router, but one VTY is
> stuck, or can you no longer log in, except on the console?
> 
> Sometimes things like this happen because of code bugs, resource
> exhaustion, etc, so taking a 5-10 minute outage to reboot the
> router might not be a bad idea, and a much better idea than
> letting the router crash on its own.  That might also be a good
> opportunity to determine if your router should be running a more
> recent IOS image to address code bugs, security vulnerabilities,
> etc.
> 
> Getting slightly off topic, most ISPs have provisions in their
> service agreements to do normal maintenance as needed, or at
> least during scheduled maintenance windows.
> 
> jms