ssh configure from client and pix firewall

[mitmcse2k]

i am new for fix firewall

i want to configure ssl configure on pix 501 firewall but i dont konw what software i would need fro client using ssl ports.

if anyone have idea what am i talking about please give me advise on this.

thank you

 

[mtashiro]

There are a lot of clients that support SSL. I use Secure CRT from VanDyke software. There a few free ones available as well.

 

[mitmcse2k]

i have licence for 10 user but not really know how to configure.

 

[mtashiro]

I am a little confused do you want SSH configured or SSL?

If you use SSL configure PDM.

http://www.cisco.com/en/US/products...stallation_guide_chapter09186a008017a423.html

If you want SSH do the following:

hostname PIX

domain-name pix.com

ca generate rsa key 512

ca save all

ssh 192.168.1.0 255.255.255.0 (or whatever your inside network is)

 

[mitmcse2k]

hay

thank you for ur help...... another thing how can i set up VPN on this pix firewall. i tink i know concept from windows site but i dont know how to set up pix firewall as vpn server..... so if you can help me with that would be osome..

Thank you

 

[mitmcse2k]

i want to configure with SSH and SSL vpn..... do you know which vpn client program i would need for configure SSH.

 

[FestusMcShamus]

after you configure the pubkey,you need to enble ssh on the pix and get an ssh client for your workstation---putty works well and it is free.


festus mcshamus, mcse

 

[mitmcse2k]

Thank you

for all your help,

 

[mitmcse2k]

once again

Thank you for all the help. but i have another problem i cant ping my outside port or get in through SSH.

it would be big help if someone help me with this

 

[MajesticMurray]

Are you sure you just haven't ICMP enabled on the outside Interface?

icmp permit any outside

Fine for testing but you might want to disable this or allow a specific IP once you are ready to install at a site. Allowing anyone to ping PIX from outside not good

 

[mitmcse2k]

even though i have icmp enable outside ports. i cant ping. well i dont really know what is the problems.

i just want to test this pix 501 but i dont know if i shuld behind the 4 port router or straight connect to DSL. if anyone have any idea give me suggestion.


Thank you

MCSE, CCNA

 

[ststokes]

I've had this problem with several PIXs running any of the 6.3 codes. If you have any type of an access list on the external interface you have to add a ACL to allow the ICMP traffic. Like this.

access-list outside_access_in permit icmp any any

Scott
CCNA, CCSE, CCSP, ISS-CE

 

[mitmcse2k]

Do i have to give my outside interface DNS Address and default dateway before my outside interface was dhcp client.

now i am giving static i ap address on outside interface. does anyone know how can i give dns address on my outside interface allso default gateway.

thank you