I was upgrading an a Cisco 2811 remotely from 12.4(24)T8 to 15.1(4)M8. The Tunnel is was using for management was part of a VRF.
interface Tunnel9 ... vrf forwarding management-vrf ...
After the upgrade I was able to ping the router remotely but wasn’t able to get an SSH connection. From the steppingstone I was using I got:
[peter@steppingstone-server:~]$ ssh 192.168.1.1 ssh: connect to host 192.168.1.1 port 22: Connection refused