topic Re: ssh config on a PIX in Network Security

ssh config on a PIX

john.graves — Fri, 21 Feb 2020 08:14:03 GMT

I have generated and saved a RSA Key and then set a ssh statement for my address.

Putty returns a connection refused statement. What have I missed?

Re: ssh config on a PIX

jripkey — Mon, 27 Jun 2005 18:06:27 GMT

Did you save the CA with the "ca save all" command? If not, I would check to see if you have an ACL permitting the connection to the PIX.

Re: ssh config on a PIX

scottmac — Tue, 28 Jun 2005 01:47:45 GMT

Most flavors of PIX IOS only support SSH version 1.

Try it as SSH version 1 with 3DES (or DES if that's all your license permits).

If you do a 'sh ver' it will give you your license restrictions.

Good Luck

Scott

Re: ssh config on a PIX

matt.austin — Wed, 29 Jun 2005 03:23:11 GMT

Just like the other reply mentioned, "ca save all" will save the RSA Key information, a "write memory" will not. Upon reboot, if this command wasn't specified, you will be unable to gain access with SSH. Also, if you change the domain name/host name of the device, this will also cause your SSH sessions to not work. The RSA Key is bound to your domain name you specify.

Re: ssh config on a PIX

david_leach — Thu, 30 Jun 2005 10:15:52 GMT

With my experiance, it's been that you're using DES (Putty defaults to 3DES I think). If you go to the ssh category in the Putty config you can move DES up above the "warn below here" line. Or the "ca save all" wasn't issued and you lost the key on reboot. It could be an accesslist somewhere else in the configuration also. Have you tried to capture the packets and see if they're in fact getting to the machine?