Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Telnet PIX from outside interface?

telnet ip-address mask outside

Although it's not recommended but,

Will it work fine? ACL is allowed.

I want to access PIX remotely, is there any other config to do?

Can anyone help?

2 REPLIES
Hall of Fame Super Blue

Re: Telnet PIX from outside interface?

Hi

No, you cannot telnet to the outside interface of the pix. You have 2 options

1) Set up an IPSEC tunnel to the pix for management

2) use ssh to access the firewall.

Note that you don't need an acl for this you need the following line in the config

ssh "ip address allowed" "netmask" outside

To set up ssh you need to make sure the pix has

1) hostname

2) domain name

then you need to generate rsa keys on the pix and then save them with the "ca save all" command. Just doing a wr mem will not save you rsa keys.

HTH

Jon

New Member

Re: Telnet PIX from outside interface?

You can configure

management-access inside

and then telnet via VPN to inside interface

81
Views
0
Helpful
2
Replies