cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
830
Views
0
Helpful
6
Replies

Telnet and SSH

laurabolda
Level 1
Level 1

Is it possible to have another public IP address (i.e. 66.102.7.000) to telnet and SSH to the ASA 5510 remotely?  If it is possible, how would you setup the telnet and SSH?  Attached is the config.  Thanks.

Laura

2 Accepted Solutions

Accepted Solutions

laurabolda wrote:

Thanks for your prompt response, Jon.

For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?

Thanks.

Laura

Laura yes it would be -

ssh outside 66.102.7.10 255.255.255.255

Jon

View solution in original post

laurabolda wrote:

Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?

Also, can I setup SSH on the selected subnet?  For example, can I do this?

SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0

Thanks.

Laura

Laura

This doc gives the full details for setting up SSH on an ASA firewall -

ASA ssh configuration

Yes you can use a subnet rather than a host entry as you have done above.

Jon


View solution in original post

6 Replies 6

Jon Marshall
Hall of Fame
Hall of Fame

Laura

SSH yes, telnet no.

You cannot telnet from the outside of the ASA to the ASA itself unless the telnet is within an IPSEC tunnel.

For ssh, assuming all the other other things have been setup ie. domain name, crypto key generated etc..

ciscoasa(config)# ssh 66.102.7.1 outside

Jon

Cisco are currently donating money to the Haiti earthquake appeal for every rating so please consider rating all helpful posts.

Thanks for your prompt response, Jon.

For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?

Thanks.

Laura

laurabolda wrote:

Thanks for your prompt response, Jon.

For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?

Thanks.

Laura

Laura yes it would be -

ssh outside 66.102.7.10 255.255.255.255

Jon

Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?

Also, can I setup SSH on the selected subnet?  For example, can I do this?

SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0

Thanks.

Laura

laurabolda wrote:

Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?

Also, can I setup SSH on the selected subnet?  For example, can I do this?

SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0

Thanks.

Laura

Laura

This doc gives the full details for setting up SSH on an ASA firewall -

ASA ssh configuration

Yes you can use a subnet rather than a host entry as you have done above.

Jon


Thank you very much, Jon.  Your instructions and documentation work.

Laura

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: