topic Re: ASA 5510 ssh in Network Security

ASA 5510 ssh

aadilovic — Mon, 11 Mar 2019 12:13:22 GMT

hello,

i have router 2801 which is connected to ASA to Outside interface, and have problem with ssh ver 1.

sh ssh

0.0.0.0 0.0.0.0 Inside

0.0.0.0 0.0.0.0 Outside.

any suggestions?

please-thanks

Re: ASA 5510 ssh

brettmilborrow — Thu, 06 Mar 2008 16:06:49 GMT

have you generated your ssh keys on the ASA?

Try this command:

crypto key generate rsa modulus 1024

Re: ASA 5510 ssh

aadilovic — Thu, 06 Mar 2008 16:33:13 GMT

yes i do...

and security-level on out interface is 50

from inside its work

Re: ASA 5510 ssh

brettmilborrow — Thu, 06 Mar 2008 16:37:31 GMT

try running:

'debug ssh'

And then attempt to connect to the firewall using ssh. This may give a clue why the session is failing.

Re: ASA 5510 ssh

aadilovic — Fri, 07 Mar 2008 14:23:21 GMT

when i try to connect i get this on router

2801#ssh -v 1 -l local 192.168.250.5

[Connection to 192.168.250.5 aborted: error status 33]

Re: ASA 5510 ssh

brettmilborrow — Fri, 07 Mar 2008 23:42:40 GMT

Could you run the 'debug ssh' command on the firewall whilst you try to connect.

ASA 5510 ssh

dylan.webb — Thu, 17 Oct 2013 02:34:35 GMT

I had a similar problem with an ASA5510 (192.168.50.206)

!------------------------------

Switch#ssh -l admin 192.168.50.206

[Connection to 192.168.50.206 aborted: error status 34]

!-----------------------------

after generating a new cert and changing ssh ver to 2 the problem disapeared.

Not sure if this is an option for you but I know there are some vulnerabilitys in ssh v1 as well.

DGW

ASA 5510 ssh

Julio Carvajal — Thu, 17 Oct 2013 04:49:05 GMT

Hello Dylan,

Remember that SSH version 1 uses 768 bits for the rsa key

Use

ssh -v 1 -l username IP address

Make sure you have configured the ASA to use Version 1

ASA(config)# ssh version 1

Regards