I have a 1260 AP that I upgraded this morning. Prior to the upgrade, the system permitted ssh and would respond to pings on the network, however now it does not respond.
I hooked up a serial cable and surfing around the config I can't seem to find anything amiss, and turning on ssh debugging is not producing any output.
I tried regenerating the RSA key in the off chance that was causing ssh to not come online, however it has not affected the inability to contact the unit over the network.
I also tried turning on "ip routing" and "ip cef" thinking they might be the issue, but no effect. I also added a static default route out to our management gateway in hopes that perhaps it was a default route issue but it also did not help
Here's the current version of IOS on the unit:
Cisco IOS Software, C1260 Software (AP3G1-K9W7-M), Version 15.2(2)JB, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2012 by Cisco Systems, Inc. Compiled Mon 10-Dec-12 23:42 by prod_rel_team ROM: Bootstrap program is C1260 boot loader BOOTLDR: C1260 Boot Loader (AP3G1-BOOT-M), Version 12.4 [mpleso-ap_jmr3_esc_0514 125]
Here's the current running config:
DEN-AP01#sh run full Building configuration... Current configuration : 3535 bytes ! ! Last configuration change at 00:22:30 UTC Mon Mar 1 1993 by gbeech version 15.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname DEN-AP01 ! ! logging rate-limit console 9 logging console warnings enable secret 5 redacted ! no aaa new-model ip cef ip domain name ds.stackexchange.com ! ! ! dot11 syslog dot11 vlan-name DEN-CLIENTS vlan 20 dot11 vlan-name DEN-MGMT vlan 10 dot11 vlan-name DEN-WIRELESS vlan 50 ! dot11 ssid StackGuest vlan 50 authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 redacted ! ! dot11 network-map crypto pki token default removal timeout 0 ! ! ! ! bridge irb ! ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers tkip ! encryption vlan 50 mode ciphers aes-ccm tkip ! ssid StackGuest ! antenna gain 0 mbssid speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 channel 2427 station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Dot11Radio0.50 encapsulation dot1Q 50 no ip route-cache bridge-group 50 bridge-group 50 subscriber-loop-control bridge-group 50 spanning-disabled bridge-group 50 block-unknown-source no bridge-group 50 source-learning no bridge-group 50 unicast-flooding ! interface Dot11Radio1 no ip address no ip route-cache ! encryption vlan 50 mode ciphers tkip ! encryption mode ciphers tkip ! ssid StackGuest ! antenna gain 0 dfs band 3 block mbssid channel dfs station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding ! interface Dot11Radio1.50 encapsulation dot1Q 50 no ip route-cache bridge-group 50 bridge-group 50 subscriber-loop-control bridge-group 50 spanning-disabled bridge-group 50 block-unknown-source no bridge-group 50 source-learning no bridge-group 50 unicast-flooding ! interface GigabitEthernet0 no ip address no ip route-cache duplex auto speed auto no keepalive bridge-group 20 bridge-group 20 spanning-disabled no bridge-group 20 source-learning ! interface GigabitEthernet0.10 encapsulation dot1Q 10 no ip route-cache bridge-group 1 bridge-group 1 spanning-disabled no bridge-group 1 source-learning ! interface GigabitEthernet0.50 encapsulation dot1Q 50 no ip route-cache bridge-group 50 bridge-group 50 spanning-disabled no bridge-group 50 source-learning ! interface BVI1 ip address 10.15.0.6 255.255.255.0 no ip route-cache ! interface BVI50 no ip address no ip route-cache ! ip default-gateway 10.15.0.1 ip forward-protocol nd ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ip route 0.0.0.0 0.0.0.0 10.15.0.1 ! access-list 111 permit tcp any any neq telnet bridge 1 route ip ! ! ! line con 0 access-class 111 in line vty 0 4 login local transport input ssh line vty 5 15 login local transport input ssh ! end
Any suggestions would be appreciated, I'm pretty stumped as to why this would suddenly go wrong.
EDIT: Here's the recreating of crypto keys output.
DEN-AP01(config)#crypto key generate rsa modulus 1024 % You already have RSA keys defined named DEN-AP01.ds.stackexchange.com. % They will be replaced. % The key modulus size is 1024 bits % Generating 1024 bit RSA keys, keys will be non-exportable... [OK] (elapsed time was 1 seconds) DEN-AP01(config)# *Mar 1 01:02:01.411: %SSH-5-DISABLED: SSH 1.99 has been disabled *Mar 1 01:02:02.515: %SSH-5-ENABLED: SSH 1.99 has been enabled