topic Re: Cannot SSH into PIX in Network Security

Cannot SSH into PIX

michael.ball — Mon, 11 Mar 2019 10:05:58 GMT

I would like to be able to use an SSH client to connect to my PIX firewall over the Internet. I can do this to my 506 PIX but not on my 515, with debug SSH on I keep seeing "invalid userid michael" even though I have put the command "user michael password michael privilege 15" into the configuration. What am I doing wrong?

Re: Cannot SSH into PIX

Patrick Iseli — Fri, 27 Apr 2007 19:02:40 GMT

Have you created a rsa key ?

#Generate a key:

ca generate rsa key 1024

show ca mypubkey rsa

#Save ssh key:

ca save all

#Allow incomming ssh connections:

ssh ip_address [netmask] [interface_name]

aaa authentication ssh console LOCAL

sincerely

Patrick

Re: Cannot SSH into PIX

sundar.palaniappan — Fri, 27 Apr 2007 19:04:21 GMT

Michael,

Have a look at this document and make sure that you have all the configuration required to allow SSH access from the outside host.

http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008069bf1b.shtml#conf

If you are still having problems post the sanitized configuration and debug ssh output.

HTH

Sundar

Re: Cannot SSH into PIX

oabduo983 — Sat, 28 Apr 2007 17:25:46 GMT

YOU ARE MISSING:

aaa authentication ssh console LOCAL

Otherwise, use pix as username and your telnet password to access your unit!

Please rate this post if it was helpful!