Unable to change SSH port number from port 22 on ICX switches

Chandini — Fri, 30 Jun 2023 15:33:01 GMT

Error encountered below:

ICX8200-24 Router(config)#ip ssh port 2300
Close all current SSH connections, then try again

From Debugs we see below details :

[U1][3][Apr 4 19:15:00.018][sshm][Debug][11916806089001951530] SSH_SUCC[12]: Outgoing_Connection_ESTABLISHED
[U1][3][Apr 4 19:15:00.018][sshm][Debug][11916806089001951530] SSH[12]: session state: Init

[U1][3][Apr 4 19:20:00.017][sshm][Debug][11916806089001951530] SSH_SUCC[11]: Outgoing_Connection_ESTABLISHED
[U1][3][Apr 4 19:20:00.017][sshm][Debug][11916806089001951530] SSH[11]: session state: Init
[U1][3][Apr 4 19:20:00.640][sshm][Debug][1155957247621203457] SSH[10]: RX Message TYPE[SSH_MSG_CHANNEL_OPEN], PKT_LEN[92], PAYLOAD_LEN[71]
[U1][3][Apr 4 19:20:00.702][sshm][Debug][11916806089001951530] SSH_SUCC[12]: Outgoing_Connection_ESTABLISHED
[U1][3][Apr 4 19:20:00.703][sshm][Debug][11916806089001951530] SSH[12]: session state: Init
[U1][3][Apr 4 19:20:16.598][sshm][Debug][1155975265009010177] SSH[10]: RX Message TYPE[SSH_MSG_CHANNEL_WINDOW_ADJUST], PKT_LEN[28], PAYLOAD_LEN[8]

The above SSH debugs show us that this occurs when the switch is connected to Smartzone.

From Lab test:

From Logs:

!
manager active-list 10.177.89.120
manager registrar
manager port-list 987
!

Config Status:Enabled Operation Status:Enabled
State:SSH CONNECTED Prev State:SSH CONNECTING Event:SZ_SSH_CONNECT_EVENT

SWR List : None
DNS List :
Active List : 10.177.89.120
Active List IPV6 : None
DHCP Option 43 : No
DHCP Opt 43 List : None
Backup List : None
Backup List IPV6 : None
Merged List : 10.177.89.120

SZ IP Used : 10.177.89.120
Port List : 987
Server Port Used : 443
SWR host : sw-registrar.ruckuswireless.com
SWR discovery retry cnt : 0
SWR host retry time : 15
Query Status : APPROVED

SSH Tunnel Status -:
Tunnel Status : Established
SSH Port : 22
CLI IP/Port : 127.255.255.253/43894
SNMP IP/Port : 127.255.255.254/10092
Syslog IP/Port : 127.0.0.1/20514
HTTP CLIENT IP/Port : 127.0.0.1/5080
HTTP SERVER IP/Port : 127.255.255.252/53556
Timer Status : Not Running

After Removing SZ config:

ICX8200-24 Router(config)#

ICX8200-24 Router(config)#no manager active-list 10.177.89.120
ICX8200-24 Router(config)#
ICX8200-24 Router(config)#
ICX8200-24 Router(config)#
ICX8200-24 Router(config)#show sz status

============ MGMT Agent State Info ===================

Config Status:Enabled Operation Status:Disabled
State:DISABLED Prev State:QUERY Event:SZ_EVENT_NONE

SWR List                : None
DNS List                :
Active List             : None
Active List IPV6        : None
DHCP Option 43          : No
DHCP Opt 43 List        : None
Backup List             : None
Backup List IPV6        : None
Merged List             :

SZ IP Used              :
Port List               : 987
Server Port Used        : 443
SWR host                : sw-registrar.ruckuswireless.com
SWR discovery retry cnt : 0
SWR host retry time     : 15
Query Status            : Not Initiated

SSH Tunnel Status -:
Tunnel Status           : Not Initiated
SSH Port                : 22
CLI IP/Port             : None/None
SNMP IP/Port            : None/None
Syslog IP/Port          : None/None
HTTP CLIENT IP/Port     : None/None
HTTP SERVER IP/Port     : None/None
Timer Status            : Not Running

ICX8200-24 Router(config)#ip ssh port 2300
ICX8200-24 Router(config)#

Solution:

Remove active list using command " no manager active-list <ip address> "
Check "show sz status" and make sure sz is disconnected
Run "ip ssh port 2300" and enter
Enable the sz connection once port number is changed

Other solutions:

Run “manager disable”. This will bring the ssh connection down and switch will be down in SmartZone and state in the "Show sz status " will be disabled
Even when switch is not connected to Smartzone you will be able to change the SSH port number in the switch

topic Unable to change SSH port number from port 22 on ICX switches in RUCKUS Self-Help

Unable to change SSH port number from port 22 on ICX switches