Enabling SSH

[patrick.hurley]

Are the following commands enough to configure ssh for allowing access from outside for full access to enable mode?

ssh 0.0.0.0 0.0.0.0 outside

cryto key generate rsa modulus 1024

aaa authentication ssh console LOCAL

username (username) password (password) privilege 15

[Istvan_Rabai]

Hi Patrick,

For ssh access through the vty lines you could add the following:

conf t

aaa authentication login SSH_LOGIN local

aaa authorization exec SSH_ACCESS local

line vty 0 4

login authentication SSH_LOGIN

authorization exec SSH_ACCESS

transport input ssh

Cheers:

Istvan

[Farrukh Haroon]

Assuming this is a Cisco firewall you are talking about, these commands should suffice.

However the ANY ANY access on the outside is not really a good security practice. But it will work!

Regards

Farrukh