Cannot SSH into PIX

Answered Question

I would like to be able to use an SSH client to connect to my PIX firewall over the Internet. I can do this to my 506 PIX but not on my 515, with debug SSH on I keep seeing "invalid userid michael" even though I have put the command "user michael password michael privilege 15" into the configuration. What am I doing wrong?

Correct Answer by Patrick Iseli about 10 years 3 weeks ago

Have you created a rsa key ?


#Generate a key:

ca generate rsa key 1024

show ca mypubkey rsa


#Save ssh key:

ca save all


#Allow incomming ssh connections:

ssh ip_address [netmask] [interface_name]

aaa authentication ssh console LOCAL


sincerely

Patrick

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Patrick Iseli Fri, 04/27/2007 - 12:02
User Badges:
  • Gold, 750 points or more

Have you created a rsa key ?


#Generate a key:

ca generate rsa key 1024

show ca mypubkey rsa


#Save ssh key:

ca save all


#Allow incomming ssh connections:

ssh ip_address [netmask] [interface_name]

aaa authentication ssh console LOCAL


sincerely

Patrick

sundar.palaniappan Fri, 04/27/2007 - 12:04
User Badges:
  • Green, 3000 points or more

Michael,


Have a look at this document and make sure that you have all the configuration required to allow SSH access from the outside host.


http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008069bf1b.shtml#conf


If you are still having problems post the sanitized configuration and debug ssh output.


HTH


Sundar

oabduo983 Sat, 04/28/2007 - 10:25
User Badges:
  • Bronze, 100 points or more

YOU ARE MISSING:


aaa authentication ssh console LOCAL


Otherwise, use pix as username and your telnet password to access your unit!


Please rate this post if it was helpful!

Actions

This Discussion