Switch vty sessions are not exited properly
Closed this issue · 3 comments
Hello
I was unable to log into my switch because I noticed that the Vanilla ISE tool has exhausted the vty session table. It seems that it logs in and then never logs out cleanly.
It appears that every time I click on the IP address on the Vanillia ISE web page, it creates a new VTY session and it takes ages to age out the old sessions.
C9300-24P IOS-XE 16.6.2
RNOCORE01#who
Line User Host(s) Idle Location
1 vty 0 admin idle 00:27:47 172.23.251.6
2 vty 1 admin idle 00:27:37 172.23.251.6
3 vty 2 admin idle 00:27:21 172.23.251.6
4 vty 3 admin idle 00:27:11 172.23.251.6
5 vty 4 admin idle 00:25:31 172.23.251.6
6 vty 5 admin idle 00:25:21 172.23.251.6
7 vty 6 admin idle 00:24:45 172.23.251.6
8 vty 7 admin idle 00:24:30 172.23.251.6
9 vty 8 admin idle 00:24:17 172.23.251.6
10 vty 9 admin idle 00:24:05 172.23.251.6
* 11 vty 10 admin idle 00:00:03 172.23.251.6
12 vty 11 admin idle 00:16:30 172.23.251.6
13 vty 12 admin idle 00:16:22 172.23.251.6
14 vty 13 admin idle 00:02:56 172.23.251.6
15 vty 14 admin idle 00:01:43 172.23.251.6
16 vty 15 admin idle 00:01:36 172.23.251.6
Interface User Mode Idle Peer Address
Also, I was a bit alarmed that it does the commands below and then doesn't put the correct settings back as they were - setting console to exec-timeout 0 effectively disabled the exec timeout - one should put the value back as it was before.
2022-06-01 20:01:02,096: %UNICON-INFO: +++ RNOCORE01 with via 'cli': configure +++
config term
Enter configuration commands, one per line. End with CNTL/Z.
RNOCORE01(config)#no logging console
RNOCORE01(config)#line console 0
RNOCORE01(config-line)#exec-timeout 0
RNOCORE01(config-line)#end
RNOCORE01#
Luckily I don't use the console - but in cases where the user has set some other exec-timeout, it will be overwritten by the script.
Thanks. I added a graceful disconnection to the functions communicating with the network devices.
Can you kindly try again, based on the latest commit?
thanks - I did a pull request and the updated session management looks good. Thanks!
I will have more time to explore this tool a bit in the lab.
Thank you for confirming. Closing the issue.