topic Re: ssh not working in Network Security

ssh not working

mitang.prajapati — Mon, 11 Mar 2019 20:05:48 GMT

hello,

when we try to connect server from internet outside system and when we check from local server its accessible form local server but from internet not working.

we checked above by telnet x.x.x.x 22

Re: ssh not working

mirober2 — Sun, 13 Mar 2011 22:06:49 GMT

Hi Mitang,

We would need some more details about your setup before we can guide you toward a solution. What kind of firewall do you have in front of this server and what version of software does it run? What type of configuration have you already done to get this to work? What do the firewall logs show when you try to connect?

In general, you'll usually need to ensure you have the correct permissions (i.e. ACLs), translations (i.e. NAT), and routes in place to get this traffic through the firewall. For example, on the ASA platform running 8.2 or older, you would probably need at least the following configuration:

! Permissions
access-list outside_access_in permit tcp any host  eq ssh
access-group outside_access_in in interface outside
! Translations
static (inside,outside)   netmask 255.255.255.255

Hope that helps.

-Mike

Re: ssh not working

mitang.prajapati — Mon, 14 Mar 2011 03:58:14 GMT

Hello

thanks for support,

Here we have ASA5540

and as of you said we have same configuration done at our side.

so please let me know if any other change we can do ?

Re: ssh not working

mirober2 — Mon, 14 Mar 2011 13:41:56 GMT

Hi Mitang,

Can you start by sharing the output of 'packet-tracer in outside tcp 12345 22'?

Also, please let us know what syslogs are generated when the connection fails.

-Mike

Re: ssh not working

csaxena — Tue, 15 Mar 2011 05:37:39 GMT

Hello Mitang,

In addition to above metioned, please share the following:

1) public IP of workstation from where you are trying to access

2) output of "show run ssh"

3) version of ASA code running

Hope this helps. Please reply back if you need any further assistance.

Regards,
Chirag
P.S.: Please mark this thread as answered if you feel your query is answered. Do rate helpful posts.