topic Re: The maximum number of management sessions for protocol ssh already exist Cisco ASA 5516 in Network Security

The maximum number of management sessions for protocol ssh already exist Cisco ASA 5516

Alex Ribas — Fri, 28 May 2021 13:39:26 GMT

Hi All

Any change to increse more than 5 connection in SSH in Cisco ASA 5516. ???

The maximum number of management sessions for protocol ssh already exist.

Cisco Adaptive Security Appliance Software Version 9.15(1)1
SSP Operating System Version 2.9(1.131)
Device Manager Version 7.15(1)150

<1-5> Enter limit for SSH protocol
xxxxxxx(config)# quota management-session ssh
ERROR: % Incomplete command
xxxxxx(config)#

Thank you and I appreciate your help.

Re: The maximum number of management sessions for protocol ssh already exist Cisco ASA 5516

Rob Ingram — Fri, 28 May 2021 13:47:17 GMT

@Alex Ribas No, 5 is the maximum.

The ASA allows a maximum of 5 concurrent SSH connections per context/single mode, with a maximum of 100 connections divided among all contexts.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa913/configuration/general/asa-913-general-config/admin-management.html#ID-2111-0000013a

Re: The maximum number of management sessions for protocol ssh already exist Cisco ASA 5516

Alex Ribas — Fri, 28 May 2021 14:00:45 GMT

Hi Rob

Why in these connection shows me 4 (because we use failover ?) in this case

TCP outside2 172.29.127.106:64318 inside 172.29.8.161:22, idle 0:11:29, bytes 29416, flags UIOB
TCP outside2 172.29.127.106:64316 inside 172.29.8.161:22, idle 0:00:00, bytes 18184, flags UIOB
TCP outside2 172.29.127.106:63147 inside 172.29.8.161:22, idle 0:24:52, bytes 347380, flags UIOB
TCP outside2 172.29.127.106:62611 inside 172.29.8.161:22, idle 0:22:37, bytes 25492, flags UIOB
xxxxxxxx#

#Sessions ConnectionType Username
3 SSH alex.ribas

Re: The maximum number of management sessions for protocol ssh already exist Cisco ASA 5516

Alex Ribas — Thu, 10 Mar 2022 07:28:08 GMT

And look it

SID Client IP Version Mode Encryption Hmac State Username
5 172.29.8.161 2.0 IN aes128-ctr sha2-256 SessionStarted alex.ribas_adm
OUT aes128-ctr sha2-256 SessionStarted alex.ribas

Just one session after that I couln't login again

Re: The maximum number of management sessions for protocol ssh already exist Cisco ASA 5516

Rob Ingram — Fri, 28 May 2021 14:12:44 GMT

@Alex Ribas

Well it looks like there is 4 connections, 3 of which have been idle for a period and one that was active. I assume the connections were disconnected, but the session continues, until the tcp timeout. Still 5 ssh connections is the ASAs maximum.