SSH into 2691 router using QEMU in GNS3

hey guys, I'm struggling to SSH into my the router using GNS3. Here's some snapshot that I took for easy understanding. It is not prompting for the username.

R3#show run
Building configuration...

Current configuration : 833 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
no ip domain lookup
ip domain name isick.com
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username choobysoo password 0 cisco
!
!
ip ssh version 2
!
!
!
!
!
interface FastEthernet0/0
ip address 10.10.10.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
login
transport input ssh
!
!
end

QEMU.jpg

topology.jpg

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

KrisA

If I am not mistaken,

You need login local

choobysoo

I tried that, but it didn't work. Any more tips?

Jpgonzal

Did you remember to create your keys? crypto key generate rsa

I had trouble with ssh myself, using the debug ssh helped. Login through console and look at the debug messages pop up as you try to connect. Hope this helps

choobysoo

Yes, I have crypto key generate rsa configured to 1024k... This is giving me a headache

gregorio323

try to do ssh -l username <ipaddress>

or you can check to see if the router is listening on port 22
show control-plane host open-ports

choobysoo

gregorio323 wrote: »

try to do ssh -l username <ipaddress>

or you can check to see if the router is listening on port 22
show control-plane host open-ports

The first command would still prompt me for my password only.. The show control-lnae host open-ports does not work. I assume that port 22 is open because I've not reconfigure in any ports and I have tried to redo this like 10 times already. I am thinking it is the QEMU is the problem.

gregorio323

choobysoo wrote: »

The first command would still prompt me for my password only.. The show control-lnae host open-ports does not work. I assume that port 22 is open because I've not reconfigure in any ports and I have tried to redo this like 10 times already. I am thinking it is the QEMU is the problem.

make sure you enable secret because one you log in you wont be able to get into privilege mode unless you add privilege level 15 under the line vty. Also you need to use login local to log in with username and password.
I've noticed you used ip domain name you should use ip domain-name. if you use login you must set a password.

if your unsure if the 22 port is open you can do on the host machine

telnet <ipaddress> <portnumber>

if running windows 7 make sure you install the telnet client.

choobysoo

Hey Greg, I think that's the way the prompt shows. I did use ip domain-name but when show run it taken out the - for some reasons. I just added telnet to my vty, it prompts for the login and password, however it doesn't let me login. The ssh <ip> still only prompt me for the password. Thanks for helping.

P.S The "ssh -l <ip>" works fine in packet tracer. But with GNS3 with QEMU as host, it would prompt for password, but when enter password it would return with Permission denied, please try again. Why permission denied? Do I have to change permission bin /bin/.ssh directory? Not too familiar with Linux.

gregorio323

choobysoo wrote: »

Hey Greg, I think that's the way the prompt shows. I did use ip domain-name but when show run it taken out the - for some reasons. I just added telnet to my vty, it prompts for the login and password, however it doesn't let me login. The ssh <ip> still only prompt me for the password. Thanks for helping.

P.S The "ssh -l <ip>" works fine in packet tracer. But with GNS3 with QEMU as host, it would prompt for password, but when enter password it would return with Permission denied, please try again. Why permission denied? Do I have to change permission bin /bin/.ssh directory? Not too familiar with Linux.

I've never used QEMU as a host i've always used the cloud.

sorry i can't help you out with linux not too familiar with it either

MosGuy

Choobysoo,

I re-created your lab & it works fine for me. As you can see by the screen shot. What password are you typing in ?

GNS3_SSH.JPG

choobysoo

Greg, Even though we didn't get very far with it but I thank you for your help, I picked up a few commands from you

MosGuy, this is what is on my screen...

ssh.jpg

MosGuy

Just a quick thought. I wouldn't think this should affect it. Are you running GNS3 as administrator ?, i.e: right-click on the GNS3 shortcut and selecting "run as administrator". I do know some features can act strange if it's not set to run as admin

Update: I was doing further testing & I came across the same denied error message. What seemed to cure it for me was removing the username and password with the "no" command, saving the config. Then pasting the username and password back in again. After that ssh started working again.

choobysoo

I tried but no luck. Guess I should use the c1700 instead. I wonder if the image has problem, I will load a new image when I get back home from work tonight. Thanks

MosGuy

Did you try setting a different username and password ?. That also worked for me when I was getting the denied message using your original one. It is a strange error, first time I've seen the message myself. Almost seems like the image doesn't like that particular combination of user/pass. It possibly could be something with the image. I'm not on my GNS3 system currently so I can't verify which 2691 image I use. If it helps, I can check later on.

choobysoo

LOL, you are right, for some reasons it doesn't like that name and password. I changed it and now I can ssh in fine. Who would thought of that

?..... Now my problem solved but I am still wondering why when I run ssh <ip> it doesn't prompt me login then password, it is just password. I have to run ssh -l <login> <ip>. Anyways, thank you very much.

MosGuy

I set up two different user accounts, it still didn't prompt. Then I put in a cloud & tested through a terminal app, which did ask for a username. That's likely just how QEMU or tiny core works. I wouldn't worry about it. Your welcome, I'm glad I could help trouble-shoot & get SSH working for you