topic Re: Problem in access a server with ssh in ASA DMZ interface in Network Security https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429667#M733923 <HTML><HEAD></HEAD><BODY><P>I need to stablish the SSH connection from my LAN to the server. Before we had a PIX we didn't have any problem , but after the migration i'm unable to do so.</P><P></P><P>The ip of my server is 172.16.0.3 and it is on the DMZ interface.</P><P></P><P>Amanda.</P></BODY></HTML> Fri, 07 May 2010 18:04:11 GMT anunes1987 2010-05-07T18:04:11Z Problem in access a server with ssh in ASA DMZ interface https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429665#M733914 <P><SPAN style="font-family: comic sans ms,sans-serif;">Need some help on ASA5520. It's the first time&nbsp; configuring it and all servers are reachable and work but there's one specific Server which I need SSH access I made the custom configuration but no joy.</SPAN></P><P><BR /><SPAN style="font-family: comic sans ms,sans-serif;">Following the information from "Sh run" about SSH config</SPAN></P><P></P><P>object-group service SSH tcp<BR /> description ACESSO_SSH<BR /> port-object eq ssh</P><P></P><P>ssh 10.6.84.45 255.255.255.255 inside<BR />ssh 10.6.84.70 255.255.255.255 inside<BR />ssh 10.6.84.44 255.255.255.255 inside<BR />ssh 10.6.84.49 255.255.255.255 inside<BR />ssh VLAN84_DADM-3040 255.255.255.0 inside<BR />ssh 10.6.84.18 255.255.255.255 inside</P><P></P><P>ssh timeout 60<BR />ssh version 1</P><P></P><P>Thaaanks ! <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/images/emoticons/happy.gif"></SPAN></P> Mon, 11 Mar 2019 17:42:28 GMT https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429665#M733914 anunes1987 2019-03-11T17:42:28Z Re: Problem in access a server with ssh in ASA DMZ interface https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429666#M733917 <HTML><HEAD></HEAD><BODY><P>Amanda</P><P></P><P>The configuration that you posted is the list of IPs allowed to establish an SSH connection to the ASA.</P><P>You need to be able to SSH to a server or to the ASA itself?</P><P>What's the IP of such server?</P><P></P><P>Federico.</P></BODY></HTML> Fri, 07 May 2010 17:42:58 GMT https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429666#M733917 Federico Coto Fajardo 2010-05-07T17:42:58Z Re: Problem in access a server with ssh in ASA DMZ interface https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429667#M733923 <HTML><HEAD></HEAD><BODY><P>I need to stablish the SSH connection from my LAN to the server. Before we had a PIX we didn't have any problem , but after the migration i'm unable to do so.</P><P></P><P>The ip of my server is 172.16.0.3 and it is on the DMZ interface.</P><P></P><P>Amanda.</P></BODY></HTML> Fri, 07 May 2010 18:04:11 GMT https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429667#M733923 anunes1987 2010-05-07T18:04:11Z Re: Problem in access a server with ssh in ASA DMZ interface https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429668#M733926 <HTML><HEAD></HEAD><BODY><P>Amanda,</P><P></P><P>If you need to establish an SSH session from the inside interface to the DMZ, you need NAT (if having nat-control enabled).</P><P></P><P>i.e</P><P>nat (inside) 1 0&nbsp; 0</P><P>global (DMZ) 1 interface</P><P></P><P>With the above configuration you should be able to SSH to the DMZ server from the inside LAN (assuming the name of the interfaces are inside and DMZ respectively).</P><P></P><P>Federico.</P></BODY></HTML> Fri, 07 May 2010 18:12:07 GMT https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429668#M733926 Federico Coto Fajardo 2010-05-07T18:12:07Z Re: Problem in access a server with ssh in ASA DMZ interface https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429669#M733931 <HTML><HEAD></HEAD><BODY><P>All ok !</P><P></P><P>Thanks Mate !</P></BODY></HTML> Fri, 07 May 2010 18:23:10 GMT https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429669#M733931 anunes1987 2010-05-07T18:23:10Z Re: Problem in access a server with ssh in ASA DMZ interface https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429670#M733936 <HTML><HEAD></HEAD><BODY><P>Good news <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P><P>Thanks for the rating!</P><P></P><P>Federico.</P></BODY></HTML> Fri, 07 May 2010 18:26:35 GMT https://community.cisco.com/t5/network-security/problem-in-access-a-server-with-ssh-in-asa-dmz-interface/m-p/1429670#M733936 Federico Coto Fajardo 2010-05-07T18:26:35Z