topic Re: ASA: Unable to configure service on port 22 in Network Security

ASA: Unable to configure service on port 22

alex.dersch — Mon, 11 Mar 2019 21:30:05 GMT

Hello, I'm trying to enable ssh access on the inside interface. It's not working and I get this error message

Unable to configure service on port 22, on interface 'INSIDE'. This port is currently in use by another feature. I did a show asp table sockets and it seems something else is listening to port tcp/22. What other service is listening on port 22. I tried it on other interfaces there it is working.

Result of the command: "show asp table socket" (172.16.2.25 is my INSIDE interface)

Protocol Socket Local Address Foreign Address State

SSL 000023ff 172.16.2.25:443 0.0.0.0:* LISTEN

TCP 0000426f 172.16.2.25:22 0.0.0.0:* LISTEN

thanks

alex

ASA: Unable to configure service on port 22

varrao — Mon, 26 Sep 2011 15:39:35 GMT

Hi Alex,

Can you provide the output of :

show run | inc inside

There's got to be some other service using the inside interface ip, and thats y you are unable to ssh to it.

Thanks,

Varun

Re: ASA: Unable to configure service on port 22

alex.dersch — Mon, 26 Sep 2011 15:44:27 GMT

Sure, but i checked it already.

Re: ASA: Unable to configure service on port 22

Kureli Sankar — Mon, 26 Sep 2011 17:10:02 GMT

This is

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtn75060

Symptom:

After upgrade the ASA to 8.4(1), ssh to one or more interfaces are failing.
Removing and re-adding the SSH configuration results in the following error
message:

ciscoasa(config)# ssh 0 0 outside
ERROR: Unable to configure service on port 22, on interface 'outside'. This
port is currently in use by another feature
Usage: [no] ssh {|}   
[no] ssh timeout  
[no] ssh version 1|2 
[no] ssh scopy enable 
show ssh [sessions []] 
ssh disconnect 
show running-config [all] ssh
clear configure ssh

Conditions:

Access via ASDM or telnet are unaffected. SSH still may work to other
interfaces, but is failing to a specific interface.

Workaround:

Reload the ASA.

Resolved in

008.004(002) 008.004(001.002)

Upgrade to get the fix.

-KS

Re: ASA: Unable to configure service on port 22

martin5641289 — Fri, 08 Jul 2022 10:04:22 GMT

I met the same issue and our ASA version is 9.16(2)14.

Someone in another discussion suggested a reboot and it helped. So I suppose the problem is related to the current state of the firewall where it is not possible to add another ssh users on some interface. I was able to add ssh user at different interface but not at outside interface. Some check prevents it. The reason is unknown.

Re: ASA: Unable to configure service on port 22

JB-WH — Fri, 05 Aug 2022 19:24:32 GMT

Seeing the same thing with 9.16(2)14.

Re: ASA: Unable to configure service on port 22

JB-WH — Thu, 11 Aug 2022 12:57:28 GMT

This is now listed as a known bug, with no resolution, currently.

CSCwb94312

Re: ASA: Unable to configure service on port 22

kewwa — Thu, 30 Jan 2025 14:53:26 GMT

The issue described in this thread should be (according to release notes 9.16) resolved in Version 9.16(3)15
https://www.cisco.com/web/software/280775065/160837/ASA-9163-Interim-Release-Notes.html