topic Re: Telnet into Cisco Pix in Network Security

Telnet into Cisco Pix

kjanakiraman — Fri, 21 Feb 2020 06:02:35 GMT

Hi,

I have Cisco pix 515 with ios 5.1(2). I had installed it long back and everything was working fine. Now Suddenly i could not telnet into it. I checked the configuration and i have give telnet access to the inside network and the idle timeout is 15 minutes, but there is no harm to the general functionality. now i have to hyperterm for any changes in the configuration.

My inside netwrok is 192.168.x.x and 10.x.x.x.

telnet 192.168.x.x 255.255.255.0 inside

telnet 10.x.x.x 255.0.0.0 inside

These are the commands i have given for telnet access before and the same did not change. What may be the problem. Can some one Advice.

Thanks in Advance

Re: Telnet into Cisco Pix

gspencer — Mon, 29 Apr 2002 12:05:00 GMT

Hi,

Is there an access-list on applied to your inside interface? If so, are you allowing hosts telnet access to PIX. Try pinging your inside interface from the PC that you are trying to telnet from. Hope this lead you in the right direction to solving this problem.

Re: Telnet into Cisco Pix

kjanakiraman — Mon, 29 Apr 2002 13:37:07 GMT

Hi,

I have access-list for blocking some chat sites. That was configured very long back and after which also i was able to telnet. The access-list was applied to the inside interface. I am able to ping the inside interface of the Pix firewall.

Re: Telnet into Cisco Pix

ccoutts — Mon, 29 Apr 2002 14:20:06 GMT

Hello,

You could try specifying specfic hosts which are allowed to telnet to the PIX, using the following format, for example:

telnet 10.X.X.X 255.255.255.255 inside

Maybe, you could also check if there are any telnet sessions on the PIX which are preventing you connecting (a sh who from enable mode should show you this) - you can then kill any offending sessions. In addition, although you've probably checked this, make sure you are actually using port 23 for telnet, and not something else like ssh.

Re: Telnet into Cisco Pix

g.rodegari — Mon, 29 Apr 2002 15:17:33 GMT

You can telnet the pix on the inside interface only from an ip address of the same network.

The telnet command has higer priority over any configured access-list.

Bye

Graz.

Re: Telnet into Cisco Pix

kjanakiraman — Tue, 30 Apr 2002 10:20:44 GMT

I checked all the things. I typed sh who but nothing is connected. The access has been given to the entire class for telneting from inside. I checked with my backup configuration but there was no change in the configuration and all are fine. What might have went wrong?

Thanks in Advance

Re: Telnet into Cisco Pix

JOHN NIKOLATOS — Tue, 30 Apr 2002 22:35:34 GMT

This may seem trivial but did you reset your pix?

There may be an ARP issue. I have seen it do weird things. Either "clear arp" on firewall, machine and switch or turn power off on all of them and back on.

This will happen if you changed IP addresses and the switch or something gets confused.

Re: Telnet into Cisco Pix

kjanakiraman — Sat, 04 May 2002 03:35:17 GMT

Thanks a lot. The Reboot did it.