Accessing ASA firewall on its outside interface from the router using telnet/ssh

[net buzz]

Hi!

I have been trying to access the ASA firewall on its outside interface by telneting from the router.

I have used the following command on the ASA:

telnet 10.0.0.1 255.255.255.255 outside

where 10.0.0.1 is the ip address of the router LAN interface.

I can ping the ASA outside interface from the router.

When I try to telnet, the result is as follows:

Router#telnet 10.0.0.10
Trying 10.0.0.10 … Open

Problem is that I do not get access to the console.

Is there a solution for this?

Please see the attached topology.

Thanks and regards,

Alvin

[Federico Coto Fajardo]

Hi,

The ASA is not going to accept telnet connections on its outside interface (even if you allow it).

The ASA will only accept SSH connections.

The only way to telnet to the outside interface of the ASA is to do it via a VPN tunnel.

Hope it helps.

Federico.

[andamani · Accepted solution]

Hi Alvin,

To add to Fredrico's saying, the following link will give you details of SSH and telnet on ASA

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008069bf1b.shtml#telnet

The link clearly states:

Note: In general, if any interface that has  a security level of 0 or lower than any other interface, then PIX/ASA  does not allow Telnet to that interface.

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved.