topic Config Pix 506 remotely in Network Security

Config Pix 506 remotely

aupton — Fri, 21 Feb 2020 05:58:34 GMT

I need to set up a 506 located in a branch office out of state. My question is this.

Can I hook a modem to the console port and dial into the router and access the console remotely?

If so how do I do it? I have setup an external modem set for auto answer. I dian in with hyperterminal and all I see is garbled text.

Any Ideas?

Re: Config Pix 506 remotely

ellis_b — Fri, 08 Feb 2002 15:23:37 GMT

yes you can do it, but I believe that would be a major security hole and not an "approved" solution. what I would recommend, if you are really going to go that route, use an access-server, 2511, 2509, whatever, with a radius/tacacs server for authentication to the access-server. This will keep your "eyes and ears" open to see if someone is attempting to hack into your network.

However, if you're really stubborn and wont use an access-server, then you need to hard-code your terminal speed to 9600bps on the computer that you are using to dial into the PIX. That should do the trick.

Brad

www.SecurityIE.com

Re: Config Pix 506 remotely

aupton — Fri, 08 Feb 2002 20:53:06 GMT

Thanks for the advice. I do not intend to leave the modem connected, just get the initial config in. From there I would have the modem turned off.

I have tried setting terminal speed to 9600, are there any other settings on PC I need to tweak?

Re: Config Pix 506 remotely

ajd — Sat, 09 Feb 2002 17:53:37 GMT

All you have to do is setup ssh access to the PIX. You can register for a free 56bit key from cisco and get a certificate for free.

So basically,

Re-Flash the PIX with 6.1 (upon reboot put in the key)

Flash the PIX with the PDM (Pix Device Manager-GUI)

Then you can setup connection via ssh (basically encrypted telnet) or the pdm from any location you specify.

Good luck

ne1secure?