Pix 506e setting up ssh

[prichards]

I am trying to setup my Pix 506e to allow ssh connections. However when I initiate a connection to it, it says connection refused. Below are the commands that I have setup.
access-list acl_out permit tcp any host 12.1.1.1 eq ssh
static (inside,outside) tcp 12.1.1.1 ssh 172.16.6.2 ssh netmask 255.255.255.255 0 0
0.0.0.0 0.0.0.0 outside

What am I missing to allow this to go through. Every time I try to connect I get 'connection refused'. I am a little new at this so everything is from what I have read. Any help is great. Thanks.

Paul

 

[tpulley]

Paul, Did you load the generate the Key?


Here is a list of the command necessary to get it working.

!!To enable ssh to the pix, make sure you have a hostname
hostname goss-d3-pix515b
!!a domain name
domain-name rtp.cisco.com
!!and then generate this ke
ca gen rsa key 1024
!--- Caution: The RSA key will not be saved without the CA SAVE ALL
command.
!--- The write mem command will not save it! In addition,if the PIX has
undergone a write erase
!--- or has been replaced, then cutting and pasting the old
configuration does not generate the key.
!--- You must re-enter the ca gen rsa key command.
!--- If there is a secondary PIX in a failover pair, doing write standby
will not copy the key
!--- from the primary to the secondary. You must also generate and save
the key on the secondary device.
ssh 172.18.124.114 255.255.255.255 inside
!! to enable ssh on the outside you can use to allow anyone to ssh in.
ssh 0.0.0.0 0.0.0.0 outside

Terry

 

[prichards]

That did it. Thanks! Now, can I set another ip address for a pass though of ssh to a Linus server on the inside of my network? It has an ssh login as well and I would like to have access to that. Can the PIX allow pass through of ssh packets? Thanks in advance.

 

[yizhar]

HI.

> Can the PIX allow pass through of ssh packets?
Yes, like any other inbound traffic (but you'll need to use a different ip address, not the one of the pix itself).


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar