topic Re: PIX 501 telnet in Network Security

PIX 501 telnet

mhel — Fri, 21 Feb 2020 06:57:32 GMT

Hi,

How can i configure a remote client that can access my pix using telnet? i already issue the command

telnet 192.168.1.1 255.255.255.255 inside

telnet timeout 5

ssh timeout 5

terminal width 80

but when asking for the password, i cant get into the pix console.

Is theres something to add?

Thanks.

Mhel

Re: PIX 501 telnet

tohuang — Thu, 28 Aug 2003 05:54:39 GMT

Hi,

Without the telnet password configured, you won't be able to telnet to the pix from inside.

The command is passwd under config mode.

Thanks

Tony

Re: PIX 501 telnet

mostiguy — Thu, 28 Aug 2003 12:20:32 GMT

you configuration will only allow a connection from the host with the ip address of 192.168.1.1 on the inside interface. is this the host from which you tried to telnet to the pix?

Re: PIX 501 telnet

mhel — Mon, 01 Sep 2003 01:41:17 GMT

Hi Tony,

Thanks for the info thats solve my problem. Next thing is, what if i add the command "202.136.160.4 255.255.255.255 inside" also to permit telnet, do i need to add the access-list to permit the telnet to my pix?

Thanks.

Mhel

Re: PIX 501 telnet

snursten — Mon, 01 Sep 2003 10:07:20 GMT

Mhel,

That will not do anything unless, somehow, 202.136.160.4 is on the inside of your PIX. What you should do is issue the command 'ssh 202.136.160.4 255.255.255.255 outside' and use ssh (encrypted shell/telnet) to connect to the PIX. This will also require the following to be done:

1) configure hostname 'hostname '

2) configure domain-name ' domain '

3) create keys 'crypto ca gen rsa key 768'

4) save keys 'ca save all'

You can then use a free ssh client (like putty) to connect to the PIX from the outside. This will not require any access-lists AFAIK.

Re: PIX 501 telnet

tohuang — Mon, 01 Sep 2003 19:01:09 GMT

Hi ,

You don't need the access list to allow the telnet traffic destinate to the pix itself. By default , all the telnet traffic to the pix is deny.

You can't telnet to the pix from outside either.

In your case, I am assuming the host 202.136.160.4 is from inside. you need to add the command to allow the user telnet to pix.

telnet 202.136.160.4 255.255.255.255 inside

If this user 202.136.160.4 is from outside, that user can access to the pix directly by using PDM or ssh.

Thanks

Tony