topic Re: How to telnet from CISCO ASA 5505 in Network Security

How to telnet from CISCO ASA 5505

tititech2007 — Mon, 11 Mar 2019 14:49:41 GMT

I have a cisco asa 5505 that is setup as the ssh server. I am able to access it without any problem.

Once connected to the ASA 5505, I would like to telnet to my old terminal server 2509 that doesn't support ssh.

How to telnet a device FROM cisco asa 5505?

Re: How to telnet from CISCO ASA 5505

JORGE RODRIGUEZ — Thu, 12 Feb 2009 18:03:08 GMT

You cannot initiate telnet session from any ASA/PIX firewall, you will have to allow straigh telnet access from outside to inside towards the 2509 server.

Re: How to telnet from CISCO ASA 5505

tititech2007 — Thu, 12 Feb 2009 18:12:56 GMT

Thanks -

That is what I am doing right now. But I don't feel secure accessing my home lab using telnet.

Is there a workaround for me to access the 2509 securely with asa?

Re: How to telnet from CISCO ASA 5505

Tshi M — Thu, 12 Feb 2009 18:25:45 GMT

I am assuming that you have a switch. How about ssh to the switch and from the switch telnet to the 2509?

Re: How to telnet from CISCO ASA 5505

tititech2007 — Thu, 12 Feb 2009 18:33:08 GMT

Thanks - I am going to try it.

But, Is that possible to forward port 22 to a switch with cisco asa?

Re: How to telnet from CISCO ASA 5505

Tshi M — Thu, 12 Feb 2009 18:38:23 GMT

I'd have to try it myself. But how about setting up a VPN session? It will be more secure.

Re: How to telnet from CISCO ASA 5505

Yudong Wu — Thu, 12 Feb 2009 19:21:04 GMT

You can use SSL VPN or regular IPSec VPN.

SSL VPN:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00806ea271.shtml

IPSec VPN:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808a61f4.shtml

Re: How to telnet from CISCO ASA 5505

tititech2007 — Thu, 12 Feb 2009 20:03:36 GMT

Vpn traffics are block at my workplace.

I am able to vpn to my home lab from starbuxx but not at my workplace. Ssh and telnet are the only open ports i find so far.

I want to connect to my home lab from work because I have some free time that I would like to invest to get my CCNP certification.

Re: How to telnet from CISCO ASA 5505

Yudong Wu — Thu, 12 Feb 2009 20:05:47 GMT

If IPSec vpn is blocked. SSL vpn should work fine. refer to my post below.

Re: How to telnet from CISCO ASA 5505

JORGE RODRIGUEZ — Thu, 12 Feb 2009 20:36:57 GMT

I agree with Keven's idea, I would be surprised SSL be block at your work place, if from your work you are allow internet banking most likely they allow ssl , so configure webvpn in your asa5505 and you can prety much access all your inside resources through webvpn.

Regards

Re: How to telnet from CISCO ASA 5505

tititech2007 — Fri, 13 Feb 2009 23:58:49 GMT

Thanks -

I am now able to webvpn to the asa but I can't figure out how to telnet from the webvpn to my terminal server.

I need some help -

Re: How to telnet from CISCO ASA 5505

Yudong Wu — Sat, 14 Feb 2009 20:02:14 GMT

You need config "port forwarding".

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/webvpn.html#wp1000093

Re: How to telnet from CISCO ASA 5505

tititech2007 — Sat, 14 Feb 2009 20:17:45 GMT

Thanks,

I am using the Cisco ASA 5500 Series adaptive security appliance, Version 8.0 and the webvpn homepage doesn't have the link for "application access". as described in the cisco doc.

You can contact me by email (tititech@gmail.com">tititech@gmail.com) and I will give you access to my lab.

Re: How to telnet from CISCO ASA 5505

Yudong Wu — Sat, 14 Feb 2009 20:23:39 GMT

Sorry, busy right now. You can try ver 8 document. You should see "application access" after you enable "port forwarding"..

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/webvpn.html#wp1291474

Re: How to telnet from CISCO ASA 5505

tititech2007 — Sat, 14 Feb 2009 20:27:16 GMT

Thanks for the new link - I am going to try it - I will let know about the result.

Re: How to telnet from CISCO ASA 5505

tititech2007 — Thu, 19 Feb 2009 01:15:32 GMT

Thanks -

I am able to telnet to my old terminal server 2509 through webvpn.

I am going to post a video of the configuration step by step. I hope it will help other members of the community.

Thanks to all of you who has help me- I will make you pround by passing the ccnp cert this year.

Re: How to telnet from CISCO ASA 5505

Yudong Wu — Thu, 19 Feb 2009 04:48:09 GMT

Martial,

Thanks for sharing.

Good luck on your CCNP test.