04-05-2010 08:26 AM
Is it possible to have another public IP address (i.e. 66.102.7.000) to telnet and SSH to the ASA 5510 remotely? If it is possible, how would you setup the telnet and SSH? Attached is the config. Thanks.
Laura
Solved! Go to Solution.
04-05-2010 09:26 AM
laurabolda wrote:
Thanks for your prompt response, Jon.
For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA? Is it the same command as your previous response?
Thanks.
Laura
Laura yes it would be -
ssh outside 66.102.7.10 255.255.255.255
Jon
04-05-2010 10:28 AM
laurabolda wrote:
Thanks for your prompt response again, Jon. Your command works. But, I am not able to SSH to the ASA from my computer 66.102.7.10. In your previous reply, you said I need to setup the domain name, crypo key generated, etc. How do I setup all the prerequisities so that I can SSH to the ASA?
Also, can I setup SSH on the selected subnet? For example, can I do this?
SSH outside 66.102.7.0 255.255.255.0
and
SSH outside 66.102.16.0 255.255.255.0
Thanks.
Laura
Laura
This doc gives the full details for setting up SSH on an ASA firewall -
Yes you can use a subnet rather than a host entry as you have done above.
Jon
04-05-2010 08:41 AM
Laura
SSH yes, telnet no.
You cannot telnet from the outside of the ASA to the ASA itself unless the telnet is within an IPSEC tunnel.
For ssh, assuming all the other other things have been setup ie. domain name, crypto key generated etc..
ciscoasa(config)# ssh 66.102.7.1 outside
Jon
Cisco are currently donating money to the Haiti earthquake appeal for every rating so please consider rating all helpful posts.
04-05-2010 08:58 AM
Thanks for your prompt response, Jon.
For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA? Is it the same command as your previous response?
Thanks.
Laura
04-05-2010 09:26 AM
laurabolda wrote:
Thanks for your prompt response, Jon.
For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA? Is it the same command as your previous response?
Thanks.
Laura
Laura yes it would be -
ssh outside 66.102.7.10 255.255.255.255
Jon
04-05-2010 10:19 AM
Thanks for your prompt response again, Jon. Your command works. But, I am not able to SSH to the ASA from my computer 66.102.7.10. In your previous reply, you said I need to setup the domain name, crypo key generated, etc. How do I setup all the prerequisities so that I can SSH to the ASA?
Also, can I setup SSH on the selected subnet? For example, can I do this?
SSH outside 66.102.7.0 255.255.255.0
and
SSH outside 66.102.16.0 255.255.255.0
Thanks.
Laura
04-05-2010 10:28 AM
laurabolda wrote:
Thanks for your prompt response again, Jon. Your command works. But, I am not able to SSH to the ASA from my computer 66.102.7.10. In your previous reply, you said I need to setup the domain name, crypo key generated, etc. How do I setup all the prerequisities so that I can SSH to the ASA?
Also, can I setup SSH on the selected subnet? For example, can I do this?
SSH outside 66.102.7.0 255.255.255.0
and
SSH outside 66.102.16.0 255.255.255.0
Thanks.
Laura
Laura
This doc gives the full details for setting up SSH on an ASA firewall -
Yes you can use a subnet rather than a host entry as you have done above.
Jon
04-05-2010 02:49 PM
Thank you very much, Jon. Your instructions and documentation work.
Laura
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide