telnet through ASA

[philbe]

i can ping the devices through the firewall, yet i'm unable to telnet to the switch/routers.

the access list allows ip to ip, rather than icmp or eq 23

using a capture on the exiting interface i can see the attempt , but no reply, to telnet, but can see the icmp.

when i run debug telnet on the router on the other side, it doesn't appear to get there, yet with debug ip icmp i can see the pings hits.

i just lose telnet from the pix/asa to the routers/switch.

any ideas much appreciated :)

[#2]

As you have mentioned that while running "debug telnet" on the router on the other side no hits are seen ,check if any ACL's are enabled on the router which may cause this issue.If any Acl's are there disable them.Also check the pix configuration.

Use the following url to get more info about establishing telnet:

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s1_72.html#wp1301515