topic Re: PIX management in Network Security

PIX management

shoebwk — Fri, 21 Feb 2020 06:55:38 GMT

Can we do a Pix management from outside. what is the configurations. whether to use telnet or ssh?

Re: PIX management

mostiguy — Mon, 11 Aug 2003 10:56:37 GMT

Telnet from the outside can only be done through an IPSec tunnel (this has been the case historically, but I don't think it has changed). SSH can be used from the outside:

first, define the domain name and hostname if you have not already. Then:

ca generate rsa

ssh x.x.x.x x.x.x.x interfacename

ssh 0.0.0.0 0.0.0.0 outside = allow ssh access from everywhere thru the outside interface

ssh 0.0.0.0 0.0.0.0 inside = allow ssh access from everywhere thru the inside interface

Re: PIX management

jmia — Mon, 11 Aug 2003 11:05:06 GMT

Hello Shoeb,

On the pix use command: shh 0.0.0.0 0.0.0.0 outside (allowing ssh from anywhere to the outside interface), You must generate RSA Key-pair for the pix before clients can connect to the pix - use command: ca generate rsa 1024 and save by using command: ca save all

To use ssh pix must have either DES or 3DES running

Jay.

Re: PIX management

shoebwk — Mon, 11 Aug 2003 11:50:24 GMT

thanks,

my pix is having 6.1 ver OS. how to activate 3des in this version

Re: PIX management

dst-amsterdam — Mon, 11 Aug 2003 12:02:34 GMT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a5d.shtml

Re: PIX management

shoebwk — Mon, 11 Aug 2003 12:15:40 GMT

I think since i have a guest access, i cant download the pix ios from the website. the only thing i can do is to upload the ios image from pix to tftp & then download it again to pix from tftp, so next time i reboot it will ask for the activation key.

Now the twist here is how can i upload the image file to tftp server?