Access to ASA from outside SSH port redirection help

[burleyman]

Lets say I want to allow access to the ASA via SSH from one IP address on the outside.

I know you would just configure this.....

ssh 1.1.1.1 255.255.255.255 outside

now lets say I already am using port 22 for something else and we cannot change that.

How can I translate to another port so I can still accomplish what I need?

Mike

[burleyman]

Would this work?

Lets say the ASA has the following IP addresses on the interfaces

Inside: 192.168.1.100

Outside: 1.1.1.1

Lets say I want to access the ASA via SSH but I can't do it normally because the port is already in use by something else. Could I just create this Access List.

Remote IP to access ASA: 2.2.2.2

access-list outside_in extended permit ip 2.2.2.2 255.255.255.255 192.168.1.100 255.255.255.255 eq 22

would that work

[Marius Gunnerud]

It is currently not possible to change the SSH port for managing the ASA.  You would need to configure a VPN connection to the ASA, configure an interface to accept managment traffic (management-access inside...where inside is the interface IP you want to SSH to).

--

Please remember to select a correct answer and rate helpful posts