EA.
Thanks for the tip. The access server is residing on the test network
with only 3 devices (TACACS, access server and a windows client) so I
don't think there are any problems as far as the performance is concern.
I also check the process on the router and SSH and TACACS are not using
that much resources there. I prefer not to use access-list so if you come
up with any new tips, I would be glad to test them out.
Regards,
Sean
>From: "EA Louie" <[EMAIL PROTECTED]>
>To: "John Neiberger" <[EMAIL PROTECTED]>,
><[EMAIL PROTECTED]>
>CC: <[EMAIL PROTECTED]>
>Subject: Re: Cisco router is running very slow when SSh is implmented
>Date: Tue, 27 Mar 2001 08:20:21 -0800
>
>Sean - try a show proc cpu and see what's going on... it will give you an
>indication of what's going on inside the router. If it isn't a cpu
>problem,
>then you'll have to look at the interface(s) and see if the performance hit
>is happening there. (in other words, you'll have to isolate the problem -
>it MIGHT be the router, but it also might NOT)
>
>pay special attention to any of the processes that deal with ssh - the exec
>may also play some part in this performance degradation
>
>Keep looking to turn off telnet... and I'll ask my network operations
>engineers how they did it (probably an inbound access list denying port 23
>traffic and allowing SSH traffic applied to the vty's... that would be my
>guess without looking any research...)
>
>----- Original Message -----
>From: John Neiberger <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Cc: <[EMAIL PROTECTED]>
>Sent: Tuesday, March 27, 2001 7:20 AM
>Subject: Re: Cisco router is running very slow when SSh is implmented
>
>
> > I don't know about the performance issue, that sounds like a "feature"
> > since a 3640 shouldn't have much trouble handling that.
> >
> > As far as disabling telnet, the only way I know of is not to set a vty
> > password. While not disabling the telnet server, it will prevent any
> > attempts to telnet to the router.
> >
> > John
> >
> > >>> "Sean Young" <[EMAIL PROTECTED]> 3/27/01 7:58:37 AM >>>
> > Hi everyone,
> >
> > Is it just me or anyone in the group experiencing the same thing?
> > I've implemented SSH features on one of our ACCESS servers and I
> > notice
> > that it is very slow. The access server is a Cisco 3640 with 128MB
> > RAM.
> > I notice the performance is quited slow even on a Fast Ethernet LAN.
> > I don't have any performance issues with Unix servers. Another thing,
> > now that I have SSH running on the access server, how can I turn off
> > telnet completely on the router? I check Cisco website but didn't see
> > any solutions for it.
> >
> > Any ideas? Thanks.
> >
> > Sean
> > _________________________________________________________________
> > Get your FREE download of MSN Explorer at http://explorer.msn.com
> >
> > _________________________________
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
> >
> >
> >
> > _________________________________
> > FAQ, list archives, and subscription info:
>http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]