topic Re: cant ssh to inside interface, only working through the management in Network Security

cant ssh to inside interface, only working through the management inf

tokis — Thu, 27 Apr 2023 20:40:58 GMT

cant ssh to inside interface, only working through the management interface
IPs are changed into not actual values
My source IP is coming from 2.2.x.x from another site and the connectivity we have is via SDWAN.

We have below configuration on the ASA:
ssh 2.2.0.0 255.255.0.0 Inside
ssh 2.2.0.0 255.255.0.0 management

ASA-17-1/pri/act# show ip
System IP Addresses:
Interface Name IP address Subnet mask Method
GigabitEthernet0/0 Outside1 x.x.xxxxxxxxxxx CONFIG
GigabitEthernet0/1 Inside 10.14.1.1 255.255.255.0 CONFIG
GigabitEthernet0/2 DMZ901 10.15.16.0 255.255.0.0 CONFIG
Management0/0 management 10.15.17.1 255.255.255.192 CONFIG

ASA-17-1/pri/act# show nameif
Interface Name Security
GigabitEthernet0/0 Outside1 0
GigabitEthernet0/1 Inside 100
GigabitEthernet0/2 DMZ901 90
Management0/0 management 10

To fix the issue, should I do the following instead?
no ssh 2.2.0.0 255.255.0.0 management

Will I get disconnected on the current ssh to the managemen IP if i configured that?

Re: cant ssh to inside interface, only working through the management

MHM Cisco World — Thu, 27 Apr 2023 20:51:36 GMT

Try under inside interface add

Management-access

And check again

Re: cant ssh to inside interface, only working through the management

tokis — Thu, 27 Apr 2023 20:54:46 GMT

thank you I will try that tomorrow once I have secured the console access as I am working remotely.
So far I have tried yesterday is (config)# management-access inside
but its still not working

Re: cant ssh to inside interface, only working through the management

Knassi — Fri, 28 Apr 2023 14:00:14 GMT

There might be an ACL putting restriction on the inside interface. The IP you are connecting from may not be authorized to get in via the inside interface