AAA authencation

patnaik1010 — Mon, 11 Mar 2019 01:18:38 GMT

I have a web srver behind ASA fiewall, server team s managing this sever throuh ssh access. I wanted user authentication to be enable when ssh traffic passes through ASA. I cofigured user authentication but web server team are not able to connect through ssh rather they are getting following error message as mentioned below.

ssh_exchange_identification: Connection closed by remote host

ASA configuration

access-list aclout permit tcp host 188.40.67.66 host 192.168.2.25 eq ssh
access-list aclout permit tcp host 188.40.67.66 host 192.168.2.25 eq 7071
access-list aclout permit tcp host 188.40.67.66 host 192.168.2.25 eq 8273
access-list aclout permit tcp host 188.40.67.66 host 192.168.2.25 eq 5111

aaa authention include ssh outside 192.168.2.25 255.255.255.255 188.40.67.66 255.255.255.255

when i am removing aaa authenticatio command above its working fine.

Please go through the configuration, correct me if any mistakes.

Patnaik

AAA authencation

Tarik Admani — Thu, 01 Sep 2011 02:04:00 GMT

Srinivas,

Here is a guide that will help:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/access_fwaaa.html#wp1150511

Thanks,

Tarik

topic AAA authencation in Network Access Control

AAA authencation

AAA authencation