topic Unable to SSH ASA using IP works fine with hostname in Network Security

Unable to SSH ASA using IP works fine with hostname

mahesh18 — Tue, 12 Mar 2019 00:44:40 GMT

Hi Everyone,

I am able to access ASA via hostname but with IP address it does not work.

Need to know what config i need to put so i am able to access it using IP by ssh and ASDM

ASA is 5520 version is 8

Thanks

Mahesh

Unable to SSH ASA using IP works fine with hostname

varrao — Tue, 08 Jan 2013 20:49:54 GMT

Hi Mahesh,

You can follow this doc to troubleshoot the SSH and ASDM issues:

https://supportforums.cisco.com/docs/DOC-13012

Hope that helps,

Thanks,
Varun Rao
Security Team,
Cisco TAC

Unable to SSH ASA using IP works fine with hostname

mahesh18 — Tue, 08 Jan 2013 21:10:30 GMT

Hi Varun,

If you read my post carefully it says

i am unable to SSH using IP address it works fine with hostname

Thanks

MAhesh

Unable to SSH ASA using IP works fine with hostname

Julio Carvajal — Tue, 08 Jan 2013 21:58:46 GMT

Hello,

Share the following:

Show run ssh

sh crypto key mypubkey rsa

Let me know the result

Julio

Unable to SSH ASA using IP works fine with hostname

mahesh18 — Tue, 08 Jan 2013 22:10:52 GMT

Hi Julio,

when i run sh run ssh

it shows IP address and masks and

ssh timeout 5

ssh version 2

and other command shows

Usage: General Purpose Key

Modulus Size (bits): 1024

Usage: Encryption Key

Modulus Size (bits): 768

and they have few numbers

thanks

mahesh

Unable to SSH ASA using IP works fine with hostname

Julio Carvajal — Tue, 08 Jan 2013 22:12:54 GMT

Hello

You need to allow ssh access,

So you want to access the ASA for SSH using the ASA ip address, what Ip address??? ( The one on the inside or outside interface)???

If it's inside do

ssh 0 0 inside

If its outside do

ssh 0 0 outside

You could be as specific as you want with the allow Ip addresses,

Regards,

Julio

Unable to SSH ASA using IP works fine with hostname

mahesh18 — Tue, 08 Jan 2013 22:51:08 GMT

Hi Julio,

I found the IP of ASA it belongs to subinterface and it has nameif xnet

How can i find which if this is inside or outside

Also it has valn config under interface.

also i found that sh run ssh does not show ASA IP .

Thanks

Mahesh

Unable to SSH ASA using IP works fine with hostname

Julio Carvajal — Tue, 08 Jan 2013 23:06:19 GMT

Hello,

Inside and outside were mentioned as an example, in your case it will be

ssh xnet 0 0

username cisco password cisco

aaa authentication ssh console LOCAL

Try that and let me know!!

Julio

Unable to SSH ASA using IP works fine with hostname

mahesh18 — Wed, 09 Jan 2013 19:52:14 GMT

Hi Julio,

So when you say this

ssh xnet 0 0

where 0 0 is IP and subnet mask of ASA IP which i can use to SSH?

Currently i can not config below commands

username cisco password cisco

aaa authentication ssh console LOCAL

due to some reaons

Thanks

Mahesh

Unable to SSH ASA using IP works fine with hostname

Julio Carvajal — Wed, 09 Jan 2013 20:06:26 GMT

ssh xnet 0 0 Means:

Any IP can access the XNET interface ip address for SSH

Now

username cisco password cisco

aaa authentication ssh console LOCAL

due to some reaons

What are the reasons if I may ask

Unable to SSH ASA using IP works fine with hostname

mahesh18 — Wed, 09 Jan 2013 20:59:30 GMT

Hi Julio,

As it is ASA we can put ssh 0 0 as it is security device.

sorry also i found now it has management interface that has IP and i can access the ASA with Management IP.

Hostname of ASA when i do nslookup on my pc shows different IP.

So in order to access the ASA with hostname IP i need to run this comman

ssh 192.168.3.0 255.255.255.0 XNET ?

i can not config username command as it is not allowed currently on the network

thanks for helping

Regards

Mahesh

Unable to SSH ASA using IP works fine with hostname

Julio Carvajal — Wed, 09 Jan 2013 21:15:51 GMT

Hello Mahesh,

You could be as restrictive and secure as you want with the ips that will access the ASA.

Unable to SSH ASA using IP works fine with hostname

mahesh18 — Wed, 09 Jan 2013 22:50:38 GMT

Hi Julio,

Many thanks again for answering all my questions.

Regards

Mahesh