Configuring SSH Access on a Cisco ASA 5510 Firewall

From NesevoWiki
Jump to navigationJump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
  • Enter configuration mode
fw> 
fw> enable
fw#
fw# config t
fw(config)#
  • You need to have an enable password to use ssh
fw(config)# enable password <your password>
  • User name and password to connect via ssh
fw(config)# username <your username> password <your password>
  • Configure Authentication Mode
fw(config)# aaa authentication ssh console LOCAL
  • Specify ssh protocol version
fw(config)# ssh version 2
  • Allow Access from a particular network over a particular interface ("inside" is the interface name)
fw(config)# ssh 192.168.0.0 255.255.255.0 inside
  • Generate a key pair
fw(config)# domain-name <your domain>
fw(config)# crypto key generate rsa modulus 1024
  • Exit configuration mode
fw(config)# exit
fw# 
fw# disable
fw>

That's it. You can now connect to your ASA 5510 Firewall via ssh on Port 22 from Network 192.168.0.0/255.255.255.0.

Retrieved from "http://wiki.nesevo.com/index.php?title=Configuring_SSH_Access_on_a_Cisco_ASA_5510_Firewall&oldid=2338"