topic Re: SSH access to firepower 1010 via loopback in Network Security

SSH access to firepower 1010 via loopback

andreas.fuchs — Wed, 17 Jan 2024 13:25:47 GMT

Hello guys,
we try to access a firepower 1010 (remote office) from our headquater over an ipsec tunnel via ssh.
Therefore we configured a loopback interface, which is part of the routing over the vpn, and this loopback is pingeable.
Somehow we are not able to get ssh running...
Any ideas what we need to enable to get ssh access to loopback running?
Thanks

Re: SSH access to firepower 1010 via loopback

Marvin Rhoads — Wed, 17 Jan 2024 14:04:24 GMT

It's not supported (on 7.3). "... loopback interfaces cannot be used for management features like AAA, SSH, Syslog, etc., they can only be used for VTI tunnels."

https://secure.cisco.com/secure-firewall/v7.3/docs/loopback-interface

As @Rob Ingram notes, release 7.4 adds ssh and other support.

(edited to reflect Rob's information)

Re: SSH access to firepower 1010 via loopback

Rob Ingram — Wed, 17 Jan 2024 14:01:25 GMT

From 7.4 - "You can now use loopback interfaces for AAA, BGP, DNS, HTTP, ICMP, IPsec flow offload, NetFlow, SNMP, SSH, and syslog" https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/roadmap/management-center-new-features-by-release.html

Re: SSH access to firepower 1010 via loopback

MHM Cisco World — Wed, 17 Jan 2024 14:02:01 GMT

are config config SSH in loop back via FMC ?
MHM

Re: SSH access to firepower 1010 via loopback

chapulincolorado — Wed, 07 Jan 2026 17:12:13 GMT

In platform settings SSH Access, add a rule for your loopback interface and which networks will be able to ssh into it.