topic Re: Cisco Pix Firewall SSH listening on port 2022 in Network Security

Cisco Pix Firewall SSH listening on port 2022

egerritsen — Fri, 21 Feb 2020 07:48:04 GMT

Hi,

Is it possible to tell the pix to listen on port 2022 for ssh ?

My provider is blocking port 22

Kind regards,

Edwin Gerritsen

Re: Cisco Pix Firewall SSH listening on port 2022

sachinraja — Mon, 13 Dec 2004 13:04:29 GMT

Hi edwin,

There are no explicit configurations, as per my knowledge that can change the SSH port on the PIX.. I dont think you can do this. It works on port 22. You can probably opt for the version of SSH , but not the port..

Regards,

Raj

Re: Cisco Pix Firewall SSH listening on port 2022

paddyxdoyle — Mon, 13 Dec 2004 14:14:59 GMT

Hi,

This may or may not be possible so please correct me if its wrong.

Perhaps you could use the "static" command to translate any SSH connections to the outside interface on port 2022 to the inside interface on port 22 thus allowing your external client to SSH to the internal interface of the PIX using port 2022 instead of 22.

so e.g. if your outside interface is 1.1.1 and your internal interface is 10.0.0.1

static (inside,outside) tcp interface 2022 10.0.0.1 22 255.255.255.255

Rgds

Paddy

Re: Cisco Pix Firewall SSH listening on port 2022

scoclayton — Mon, 13 Dec 2004 14:47:53 GMT

Good thought but unfortunately, it will not work. The only way we could accomplish something like this would be to use an upstream device (like an IOS router) to do the port translation (similar to the idea above). Have it hit the upstream device on port 2022 and have that device translate the destination port to 22 and send it down to the PIX.

There is no mechanism to change the listening port for SSH on the PIX.

Scott