Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

transport output telnet and FWSM

Can anybody point me to a document that outlines the telnet session is used between the switch and the FWSM to "session" into the module?

thanks.

bruce

5 REPLIES
Hall of Fame Super Blue

Re: transport output telnet and FWSM

Bruce

Not sure what you are asking for. Do you mean the syntax of the command or how it works ?

Jon

Community Member

Re: transport output telnet and FWSM

hi jon,

well, honestly, I've got one of our security guys asking us why we dont use SSH to session into the FWSM...I recall reading somewhere that telnet is the transport output to session into the modules on a 6500 catalyst...and I dont see anywhere that ssh can be configured to allow you to use it to session into the modules...

So, I'm trying to relocate that bit of information so i can refer to it when I answer the question...but, i have not been able to find it and for the life of me, i dont recall where i read that...

bruce

Hall of Fame Super Blue

Re: transport output telnet and FWSM

bruce.summers wrote:

hi jon,

well, honestly, I've got one of our security guys asking us why we dont use SSH to session into the FWSM...I recall reading somewhere that telnet is the transport output to session into the modules on a 6500 catalyst...and I dont see anywhere that ssh can be configured to allow you to use it to session into the modules...

So, I'm trying to relocate that bit of information so i can refer to it when I answer the question...but, i have not been able to find it and for the life of me, i dont recall where i read that...

bruce

Bruce

Not sure i have seen that documentation, i'll have a look around.

What i would say though is that even if it was a form of telnet it is not the security issue that telnetting across the network is. For example if you had ssh access to the 6500 switch and then used session to connect to the FWSM there would be no cleartext password to read on the LAN. I think the reasoning for not having ssh available is that you need to have access to the 6500 itself to be able to session to any of the modules and access to the 6500 should be controlled.

Jon

Community Member

Re: transport output telnet and FWSM

Agreed,

Was just hoping to have a document to refer them to...I'm still looking, but cant seem to locate it anywhere...AND I remember when I read it, it was like a light bulb came on, AH HA!!!

Thanks for the reply and input...

bruce

Community Member

Re: transport output telnet and FWSM

sorry, i said a whole bunch and never answered your direct question.

I suppose, I'm looking for how the session command works...how it uses telnet to session into the module...

Bruce

816
Views
0
Helpful
5
Replies
CreatePlease to create content