The Remote System Refused the Connection – Cisco Router SSH

When trying to SSH to a Cisco Router or Switch you get this error

This can be caused by a number of reasons

• The transport setting on the vty lines is not permitting SSH
• You do not have SSH enabled
• An Access-List is blocking SSH traffic

Lets look at each scenario and enable the appropiate setting 

For this tutorial I am using a Cisco CSR1000V as a test router running on my esxi server. This is a new install with no configuration.

First check the VTY lines with a simple show run and scroll to the bottom

Here you can see that for all VTY lines the transport input has been set to none – This means no connectivity!

Let fix that with one command

Now do a show run again and you will see transport input ssh on all lines

If we try to SSH to the router now it still fails

So lets move to step 2 – enable SSH

If you run this command

It will show you what SSH is setup

In this case none

R1# sh run | inc ssh
R1#

So lets generate some SSH keys

This will fail as we have not specified a DNS name

Now run the crytpo command again and you will see SSH is enabled.

Lets try and SSH to our router again

Bingo!

We now have SSH access to our device

The final reason is an access list on vty lines – this can be checked at the first stage to see if there is any security blocking access.

I hope this helps!

Roger