topic Re: SSH to ASA 5510 remotely in Network Security

SSH to ASA 5510 remotely

mburguk1000 — Mon, 11 Mar 2019 15:10:32 GMT

I want to set up SSH to my ASA externally so I can manage it remotely,can some one please tell me the most secure way to do it

Many Thanks

Re: SSH to ASA 5510 remotely

Collin Clark — Thu, 26 Mar 2009 14:36:25 GMT

PIX(config)#hostname PIXOne

PIXOne(config)#domain-name mydomain.com

PIXOne(config)#ca generate rsa key 1024

PIXOne(config)#ssh time-out 60

PIXOne(config)#ssh 75.50.95.72 255.255.255.255 outside

PIXOne(config)#passwd your_secret_password

PIXOne(config)#exit

PIXOne#wr mem

The ssh 75.50.95.72 255.255.255.255 outside line should be changed to be the address you want to manage the ASA from. Limit this to as few addresses as possible.

Hope that helps.

Re: SSH to ASA 5510 remotely

mburguk1000 — Thu, 26 Mar 2009 14:48:49 GMT

Thanks for your swift reply, is that method just using a password and no other means of authentication

Re: SSH to ASA 5510 remotely

Collin Clark — Thu, 26 Mar 2009 14:50:08 GMT

Yes. You can configure other methods though (local, radius, tacacs, etc).

Re: SSH to ASA 5510 remotely

vikram_anumukonda — Thu, 26 Mar 2009 14:53:35 GMT

Step 1.

domain-name name

Step 2.

crypto key generate rsa

HTH

Vikram

Step 3.

Enable SSH on an interface.

ssh x.x.x.x netmask outside

default username & password are pix/cisco