It is currently Tue Nov 21, 2017 8:16 am


All times are UTC




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: Getting some Security Features to work with GNS3
PostPosted: Tue Sep 16, 2014 10:01 pm 
Offline

Joined: Tue Sep 16, 2014 9:52 pm
Posts: 2
Hello,
I have been trying to get some security features like SSH, crypto to work on GNS3 but with no success.
I have just downloaded the newest version of GNS3
I have IOS that should support security features - c7200-jk9o3s-mz.124-7a.bin and c3640-jk9o3s-mz.124-12.bin
Please let me know what tweak I can make so that these features work on GNS3 routers.


Thanks


Kufre




Top
 Profile  
 
 Post subject: Re: Getting some Security Features to work with GNS3
PostPosted: Wed Sep 17, 2014 8:28 am 
Offline

Joined: Sat Aug 17, 2013 7:59 pm
Posts: 123
Location: Upper Silesia, Poland
You have to set the hostname (in fact, it is already done when you start the router), but you have to:
- set domain name
- generate RSA crypto keys
- enable ssh (preferrably version 2)

After that, it should work.

_________________
If you can see any inaccuracies or other language-related mistakes in my post(s), please forgive me - English is not my native language


Top
 Profile  
 
 Post subject: Re: Getting some Security Features to work with GNS3
PostPosted: Wed Sep 17, 2014 2:50 pm 
Offline

Joined: Tue Sep 16, 2014 9:52 pm
Posts: 2
Hello Abort,
Thanks for responding, I have done these steps already but does not work. In fact, I followed the steps on the CCNA security LAB manual as I want to use GNS3 to practice the LAB.
Please see the attached.

Thanks.


Kufre


Attachments:
SSH.JPG
SSH.JPG [ 27.52 KiB | Viewed 1394 times ]
Top
 Profile  
 
 Post subject: Re: Getting some Security Features to work with GNS3
PostPosted: Wed Sep 17, 2014 6:16 pm 
Offline

Joined: Sat Aug 17, 2013 7:59 pm
Posts: 123
Location: Upper Silesia, Poland
I have no idea why it does not work.
I configured my routers with exactly the same commands, and... I can use ssh to work remotely, both ways.
I tested IOSes c3640-jk9s-mz.124-16 and c3660-telcoentk9-mz.124-13b - both works like it supposed to.

A caret sign (^) suggests that you are using IOSes that HAVE NOT crypto support enabled. Remeber that you CAN NOT rely on filename. Filename can be anything - but I assume you know that :)
Most important question is if you have crypto-enabled IOS... "show version" should answer that question. Also you can type "cr" followed by "?" and check if you have "crypto" command available.
Alternatively you can test another IOS image(s).



_________________
If you can see any inaccuracies or other language-related mistakes in my post(s), please forgive me - English is not my native language


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group

phpBB SEO