Ar550 unable to connect

Fault Description
The SSH server fails to be logged in through STelnet.

Procedure:
1. Check whether the SSH service is enabled on the SSH server.
Log in to the SSH server through the console port or using Telnet. Run the display ssh server status command to check the SSH server configuration.

If the STelnet service is disabled, run the stelnet server enable command to enable the STelnet service on the SSH server.

2. Check the protocol configuration in the VTY user interface view on the SSH server.
Run the user-interface vty command on the SSH server to display the user interface view. Run the display this command to check whether protocol inbound on the VTY user interface is set to ssh or all. If no, run the protocol inbound { ssh | all } command to enable STelnet users to connect to the device.

3. Check whether the RSA public key is configured on the SSH server.
A local key pair must be configured when the device works as the SSH server.

Run the display rsa local-key-pair public command on the SSH server to check the current server key pair. If no information is displayed, the server key pair has not been configured. Run the rsa local-key-pair create command to create a key pair.

4. Check whether an SSH user is configured on the SSH server

Run the display ssh user-information command to view the configuration of the SSH user. If there is no configuration, run the ssh user authentication-type command in the system view to create an SSH user and configure the SSH user authentication mode.

5. Check whether the number of users who have logged in to the SSH server reaches the upper limit.

Log in to the device through a console port. Run the display users command to check whether the current VTY channel is completely occupied. By default, a maximum number of five VTY channels are allowed. You can run the display user-interface maximum-vty command to check the maximum number of users allowed in the current VTY channel.

If the number of current users has reached the upper limit, run the user-interface maximum-vty 15 command to increase the maximum number of users allowed in the VTY channel to 15.

6. Check whether an ACL is configured on the user interface of the SSH server.

Run the user-interface vty command on the SSH server to display the SSH user interface view. Run the display this command to check whether an ACL has been configured on the VTY user interface. If yes, record the ACL number.

Run the display acl acl-number command on the SSH server to check whether the SSH client IP address is denied in the ACL. If yes, run the undo rule rule-id command in the ACL view to delete the deny rule, and then run the rule permit source source-ip-address soucer-wildcard command in the ACL view to permit the client IP address.

7. Check the SSH version on the SSH client and server.

Run the display ssh server status command on the SSH server to check the SSH version.

If the version is SSHv1, run the ssh server compatible-ssh1x enable command to configure the version compatibility function on the server.

8. Check whether the first authentication function is enabled on the SSH client.

Run the display this command in the system view on the SSH client to check whether the first authentication function is enabled on the SSH client.

If no, an STelnet user fails to log in to the SSH server for the first time because verifying the RSA public key on the SSH server fails. Run the ssh client first-time enable command to enable the first authentication function on the SSH client.

https://support.huawei.com/enterprise/en/doc/EDOC1000068514?section=j009

Hi,
We've noticed your problem, and we are processing on it, kindly wait a second.

Hi @PatRevol
Please try enter the BootROM menu to upload the backup configuration file or reset the startup configuration.
Here is the BootROM menu guidline https://support.huawei.com/hedex/hdx.do?docid=EDOC1000163884&id=dc_cfg_bios_0001&lang=en

@chenhui I'm unable to connect to the CLI, it ask me for user name and password...and it doesn't work, so i'm unable to restart and press ctrl+b.

Please try find out the default username and password based on your product in our iKnow robot, https://support.huawei.com/iknow/
Select the correct product line, and input the default passwor, the iKnow will guide you to get the default password and username.

Hello,
The default user name/password of the console is admin/Admin@huawei
If you can access the bootrom view, just select 7 to access the file manager menu. And the select 2 to clear the console login password.
I hope this helps.

Hello,

Please try to perform the following step:

• Access the BootROM main menu and select 5 to access the file manager menu.

        Main Menu

    1. Default Startup

    2. Serial Menu

    3. Network Menu

    4. Startup Select

    5. File Manager

    6. Reboot

    7. Password Manager

Enter your choice(1-7):5

        File Menu

    1. Flash file system

    2. SDCard file system

    0. Return

Enter your choice(0-2):

• Access the main menu and select 1 to access the flash file system menu.

        File Menu

    1. Flash file system

    2. SDCard file system

    0. Return

Enter your choice(0-2):1

        Flash file system MENU

    1. List file in flash

    2. Delete file in flash

    3. Rename file in flash

    4. Format Flash file system

    5. Check Flash file system

    0. Return

Enter your choice(0-5):0

• Access the main menu and select 2 to access the SD card file system menu.

        File Menu

    1. Flash file system

    2. SDCard file system

    0. Return

Enter your choice(0-2):2

        SDCard file system MENU

    1. List file in SDCard[1]

    2. Delete file in SDCard[1]

    3. Rename file in SDCard[1]

    4. Format SDCard[1]

    5. Check SDCard[1]

    0. Return

Enter your choice(0-5):

• Select 1 to access the List file in SDCard[1] menu.    //Find the configuration file name, which is usually cfg.zip or vrpcfg.zip.

Enter your choice(0-5):1Files of the device:

drwxrwxrwx         -  Dec 27 2012 07:07:00   logfile

-rwxrwxrwx  77773440  Dec 16 2011 15:18:08   software.cc

-rwxrwxrwx 103661312  Nov 27 2012 19:46:48   softwarenew.cc

-rwxrwxrwx      1241  Mar 03 2012 17:30:34   rootcert.pem

-rwxrwxrwx  86307328  Apr 27 2012 15:11:36   softwarenew1.cc

-rwxrwxrwx      1728  Apr 27 2012 19:21:38   patch.dat

-rwxrwxrwx      3275  Dec 16 2012 07:50:50   cfg.zip

-rwxrwxrwx      2172  Dec 16 2012 14:18:08   cfgnew.zip

-rwxrwxrwx      5414  Dec 17 2012 19:14:26   cfgnew1.zip

-rwxrwxrwx    558320  Sep 18 2012 20:04:10   test.txt

10 files found!

1973735424 Byte total, 1031127040 Byte free.

• Select 3 to access the Rename file in SDCard[1] menu.      //Rename the configuration file name

Enter your choice(0-5):3Please input the file name: cfg.zip

Please input the new name: cfgnew.zip

Rename file[sd1:/cfg.zip] to [sd1:/vrpcfg.zip], Yes or No(Y/N): y

Rename OK!

Then return to the main menu to reboot the device. The device will start with empty configuration.