Cannot telnet or ssh to the outside interface

[joe.ho]

I setup a site-to-site VPN tunnel at the remote ASA5505. I am able to asdm to the outside interface but not ssh. I switch to telnet and still not allow me to access. I added an ACL to allow telnet any to the outside interface but still not working. In ASDM I see the log

IPSEC: Received a non-IPSec packet (protocol= TCP) from 99.237.x.x to 173.239.x.x

Here is the second issue. When I want to change the telnet back to ssh using ASDM I got the following error.

An IP address and network mask combination of 0.0.0.0/0.0.0.0 already exists for interface outside.

The firewall is running 8.2(3), ASDM is 6.3(4)

Does anybody know what is the issue? Thanks for helping.

Below is the partial config.

access-list inside_nat0_outbound extended permit ip 192.168.22.0 255.255.255.0 192.168.21.0 255.255.255.0

access-list outside_1_cryptomap extended permit ip 192.168.22.0 255.255.255.0 192.168.21.0 255.255.255.0

access-list acl_outside extended permit tcp any interface outside eq telnet

access-group acl_outside in interface outside

aaa authentication telnet console LOCAL

aaa authentication ssh console LOCAL

telnet 0.0.0.0 0.0.0.0 outside

crypto map outside_map 1 match address outside_1_cryptomap

crypto map outside_map 1 set pfs

crypto map outside_map 1 set peer 206.191.x.x

crypto map outside_map 1 set transform-set ESP-3DES-SHA

crypto map outside_map interface outside

[cadet alain]

Hi,

you can't telnet to outside interface except if you put the telnet traffic in IPsec tunnel.

for ssh try  this:     

no telnet 0.0.0.0 0.0.0.0 outside

ssh  0.0.0.0 0.0.0.0 outside

and change your ACL inbound on outside to permit ssh

Regards.

Alain.

[Kureli Sankar]

Agree with Alian.

You cannot telnet to the lowest security interface on our firewall.

Also refer this link for minimum requirement and other config lines that you need to enable ssh.

https://supportforums.cisco.com/docs/DOC-13012

-KS