SSH will not connect through outside PIX 515 interface

gzullich — Fri, 21 Feb 2020 07:23:57 GMT

Hi I have an odd problem and hope someone may be able to throw me a pointer.

I have 2 PIX boxes, a 506 and a 515. I can connect to both with SSH from the inside int however the 515 will not accept connections from the outside int. The 506 is good both ways with all the same clients.

I turned on the debug ssh and nothing appears on the 515 when a connection is attempted (where the 506 displays a normal session when debugging).

All the client s/w works with the 506 from the outside however the 515 using TSSSH disconnects quickly with error 'the program does not understand the server's version of the protocol'. Putty simply fails to authenticate then says the server sent a disconnect.

Both are Ver;

Cisco PIX Firewall Version 6.3(1)

Cisco PIX Device Manager Version 3.0(1)

The 2 Configs (I changed my IP)...

ssh 205.123.123.123 255.255.255.255 outside (my IP)

ssh 192.168.1.88 255.255.255.255 inside

ssh timeout 10

ssh 205.123.123.123 255.255.255.255 outside (my IP)

ssh 0.0.0.0 0.0.0.0 inside

ssh timeout 60

Any one have any thoughts?

TIA

George

Re: SSH will not connect through outside PIX 515 interface

mostiguy — Sat, 15 May 2004 16:44:56 GMT

DId you try cranking up logging on putty?

Session - logging

Sounds strange. Which client works on the inside interface? DO both pixen have the 3des/aes activation key?

topic SSH will not connect through outside PIX 515 interface in Network Security

SSH will not connect through outside PIX 515 interface

Re: SSH will not connect through outside PIX 515 interface