topic Re: How to allow SSH to a server from outside across an ASA fire in Network Security https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039457#M894567 <HTML><HEAD></HEAD><BODY><P>The server is in our LAN, routing to the same gateway as the rest of the servers, I will do the capture but meanwhile kindly see attached firewall configs. Thanks.</P><P></P><P> </P><P></P></BODY></HTML> Mon, 27 Oct 2008 05:55:31 GMT wwanjohi123 2008-10-27T05:55:31Z How to allow SSH to a server from outside across an ASA firewall. https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039453#M894563 <P>I have NATted an internal server to a public address and allowed all IP from a source external public IP Address to allow it SSH to the NATted internal server. I'am using an ASA firewall. i have configured all the rules on both the outside and inside interface. iam able to telnet to port 80 but i can't SSH to it from the internet. Locally on my LAN both both protocols work to the server. kindly assist.</P> Mon, 11 Mar 2019 14:02:25 GMT https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039453#M894563 wwanjohi123 2019-03-11T14:02:25Z Re: How to allow SSH to a server from outside across an ASA fire https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039454#M894564 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Have you permitted TCP Port 22 in your Access-Lists. Example:</P><P></P><P>access-list INBOUND extended permit tcp any host x.x.x.x eq ssh</P><P></P><P>If you have already permitted the TCP Port 22 in the ACL, do you see any logs on the ASA when SSH does not work?</P><P></P><P>Regards,</P><P>Arul</P><P></P><P>*Pls rate if it helps*</P><P></P></BODY></HTML> Fri, 24 Oct 2008 13:41:40 GMT https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039454#M894564 ajagadee 2008-10-24T13:41:40Z Re: How to allow SSH to a server from outside across an ASA fire https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039455#M894565 <HTML><HEAD></HEAD><BODY><P>I have applied as above, but cannot get any activity/ events on the real time log.</P><P>when i try to ssh from external it is still timming out.</P><P></P><P>Is there any special configs i need to do to allow ssh traffic?</P><P></P><P>I have permited all IP and i can get icmp echo reply even www .</P><P> however ssh does not appear on the list on the inspection protocols...help!</P><P> </P><P></P></BODY></HTML> Fri, 24 Oct 2008 14:47:49 GMT https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039455#M894565 wwanjohi123 2008-10-24T14:47:49Z Re: How to allow SSH to a server from outside across an ASA fire https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039456#M894566 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>If you have already configure NAT for the server and permitted TCP Port 22, I would check</P><P></P><P>1. ACL on inside interface </P><P>2. Any kind of ACL on the SSH Server</P><P>3. DualNIC, server responding/routing to a different gateway</P><P>4. Use Capture command and capture information on the outside and inside for the SSH Traffic. </P><P></P><P>Also, is it possible to post the configuration from the Firewall.</P><P></P><P>Regards,</P><P>Arul</P><P></P><P>*Pls rate if it helps*</P></BODY></HTML> Fri, 24 Oct 2008 14:56:10 GMT https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039456#M894566 ajagadee 2008-10-24T14:56:10Z Re: How to allow SSH to a server from outside across an ASA fire https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039457#M894567 <HTML><HEAD></HEAD><BODY><P>The server is in our LAN, routing to the same gateway as the rest of the servers, I will do the capture but meanwhile kindly see attached firewall configs. Thanks.</P><P></P><P> </P><P></P></BODY></HTML> Mon, 27 Oct 2008 05:55:31 GMT https://community.cisco.com/t5/network-security/how-to-allow-ssh-to-a-server-from-outside-across-an-asa-firewall/m-p/1039457#M894567 wwanjohi123 2008-10-27T05:55:31Z