Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SSH to Pix

Status
Not open for further replies.

Guest_imported

New member
Jan 1, 1970
0
I am trying to set up an SSH telnet session to the outside interface of a Pix 515 using the 56 bit DES and a puTTY SSH client on Windows 2000.
I just want a straight forward connection without AAA or certificates etc. I assume I have to generate a pre-shared key on the Pix to be used by the client but how much of the other isakmp stuff do I need to add (e.g.hash algoriths, transform sets etc etc.)The Pix doco is pretty confusing on this.(to me anyway)
If anyone has a partial config I would be grateful.
TIA
Regards
Rob
 
HI.

At the pix you have to issue (once):

ca generate rsa key 1024
ca save all

And verify with "show version" that DES is enabled.

At the client, you need to set it to SSHv1 instead of the default SSHv2.

No need at all for the isakmp and other IPSec options.
IPSec is NOT used here - SSH is an upper layer protocol similar to SSL.

Bye
Yizhar Hurwitz
 
I believe you have to set the username field to pix also.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top