Hi,
To allow ssh, either from inside or outside, the following must be configured in your PIX:
1. Hostname
2. Domain name
3. Generate rsa key (and save it using "ca save all")
4. Configure allowed ssh host(s)
5. Set ssh timeout (optional)
Example
firewall(config)# hostname MYFW01
MYFW01(config)# domain-name abc.edu
MYFW01(config)# ca generate rsa key 512 (can also use 1024)
Keypair generation process begin.
Success.
MYFW01(config)#sh ca mypubkey rsa
% Key pair was generated at: 18:13:07 XXX May 19 2005
Key name: MYFW01.abc.com
Usage: General Purpose Key
Key Data:
xxxx
MYFW01(config)# ca save all
MYFW01(config)# ssh 192.168.10.x 255.255.255.255 inside
MYFW01(config)# ssh 192.168.10.y 255.255.255.255 inside
MYFW01(config)# ssh timeout 10 --------> (default is 5 min)
Beside SSH, you can now use HTTPS to access your PIX. The additional task is to configure "http", as follow:
MYFW01(config)# http server enable
MYFW01(config)# http 192.168.10.x 255.255.255.255 inside
To allow SSH or HTTPS access from outside/external network, use the same "ssh" or "https" command but replace
the keyword "inside" with "outside".
Rgds,
AK
