topic Re: % Connection refused by remote host in Network Security

% Connection refused by remote host

Ibrahim Jamil — Mon, 11 Mar 2019 20:25:56 GMT

Hello Folks

i m trying to telnet to my asa 5510 from the core swith,however i received the below msg,how enable it?

172.30.1.100 is the inside interface of the asa

CITYCORE#telnet 172.30.1.100
Trying 172.30.1.100 ...
% Connection refused by remote host

CITYCORE#

Re: % Connection refused by remote host

Jennifer Halim — Wed, 27 Apr 2011 06:57:39 GMT

You might want to check if telnet has been enabled on the ASA inside interface, and if the core switch IP Address has been added as telnet client.

You can check by issueing: sh run telnet

You should see the IP Address of the core switch, or a more generic subnet that the core switch belongs enabled for telnet on the inside interface.

Re: % Connection refused by remote host

Ibrahim Jamil — Wed, 27 Apr 2011 17:50:01 GMT

Hi Halim

what do u mean by the below ?

and if the core switch IP Address has been added as telnet client

Re: % Connection refused by remote host

cadet alain — Wed, 27 Apr 2011 18:09:52 GMT

Hi,

and if the core switch IP Address has been added as telnet client

if telnet has been enabled on inside interface then sh run telnet will give you a result like this: telnet x.x.x.x y.y.y.y inside

where x.x.x.x is subnet and y.y.y.y subnet mask telling which IPs can telnet on inside interface

Regards.

Alain.

Re: % Connection refused by remote host

Jennifer Halim — Thu, 28 Apr 2011 01:16:04 GMT

The command on the ASA would be:

telnet 255.255.255.255 inside

This will allow the core switch to telnet to the ASA on the inside interface.

Re: % Connection refused by remote host

Ibrahim Jamil — Thu, 28 Apr 2011 04:57:10 GMT

hi folks

I m trying to telne tfor the core switch witch exists in other site to asa 5510 exist in other site,means the the core and the asa aren't in the same same subnet

Re: % Connection refused by remote host

Jennifer Halim — Thu, 28 Apr 2011 05:12:11 GMT

Do you mean that there is site-to-site VPN tunnel between the 2 sites, and you are trying to telnet to the inside interface of the ASA on the remote site from the core switch?

There are a few things that need to be checked to allow that access if it is connected as per the above description.

Can you share the core switch ip address as well as the configuration from both ASA?

Re: % Connection refused by remote host

Ibrahim Jamil — Thu, 28 Apr 2011 07:01:35 GMT

Hi Halim

i have the same as you mentioned

Do you mean that there is site-to-site VPN tunnel between the 2 sites, and you are trying to telnet to the inside interface of the ASA on the remote site from the core switch?

Re: % Connection refused by remote host

Jennifer Halim — Fri, 29 Apr 2011 04:35:31 GMT

On the remote ASA that you are trying to telnet to, you would need to add the following command:

management-access inside

telnet <255.255.255.255> inside

Also, your local ASA where the core switch is connected needs to allow the telnet connection through to the remote ASA.

Re: % Connection refused by remote host

khanfremi — Sat, 11 Apr 2020 00:09:34 GMT

TCP is allowed by defatult on ASA.

ICMP (Ping is not allowed by default)

Please see the topolgy

i can ping all the devices from ASA,

when i m trying to telnet from R1 to R2 its not going through ASA.

R1#telnet 150.1.20.2
Trying 150.1.20.2 ...
% Connection refused by remote host

!
line con 0
logging synchronous
line aux 0
line vty 0 4
exec-timeout 15 0
password cisco
login
transport input none
!

Much Appricated your kind and quick response
Many many thanks in advance

Re: % Connection refused by remote host

arslan_riaz2015 — Wed, 24 Jun 2020 09:37:21 GMT

Same Error i am also getting in eve-ng is there any solution on this