topic Firewall and SSH in Network Security

Firewall and SSH

Duong Nguyen — Tue, 12 Mar 2019 00:32:18 GMT

We have a Cisco Firewall 5510.

When I VPN into the network, I have to rdp to a windows desktop in order to SSH into my linux boxes.

Please show me how to ssh ditrectly from home PC.

Firewall and SSH

Jouni Forss — Tue, 04 Dec 2012 22:22:30 GMT

Hi,

If you can already access some server/computer remotely through VPN connection, you should be able to configure the ASA to include those other devices too.

If you can provide your ASA configuration (removing any sensitive information from it) we can go through the needed configurations steps for you to be able to directly use the VPN Client computer to access the remote devices with SSH.

If you post the configuration here, please also provide the IP addresses (or a network/subnet) of the devices you need to access

- Jouni

Firewall and SSH

Duong Nguyen — Wed, 12 Dec 2012 00:50:58 GMT

Sorry I made a mistake.

It only when I ssh or rdp from home my vpn connection at work, and try to connect with servers at another location using a point to ppoint vpn that ssh and rdp doesnt work.

Firewall and SSH

Jouni Forss — Wed, 12 Dec 2012 07:24:14 GMT

Hi,

Did I undestand you correctly, is the situation the following

You connect to the company network from home with VPN Client
The Linux boxes are located behind a L2L VPN connection thats between the same VPN device that you connect to with the VPN Client

What you would need to confirm is

That the remote network(s) that holds these Linux box is included in the VPN Client Split tunnel configurations
- If the VPN Client is configured to tunnel all traffic you dont have to do anything
You have to make sure that the traffic from the VPN Client pool is also allowed to the L2L VPN or if possible NAT the VPN Client users to some address that is already configured on the tunnel

There is also other factors to the this setup but I can only give some general advice without actually seeing your ASA firewall configuration. If you want you can post that for us to go through (remove any sensitive information like public IP:s, username/passwords, etc)

- Jouni