PIX cutting off internet

[jstewart73]

Is there a way to access a PIX 515 by remotely SSHing to it restart it?

[troullier00]

Yes. Enable SSH to Pix from whatever interface you will connect to. What version of software are you using?

Sent from Cisco Technical Support iPhone App

[jstewart73]

PIX 515 w/ ver 6.2

can you give an example of how to "Enable SSH to Pix from whatever interface you will connect to"

Do I need to DES activation Key??

[troullier00]

Ssh x.x.x.x inside

Sent from Cisco Technical Support iPhone App

[jstewart73]

I herited this PIX I have a bunch of lines w/

ssh x.x.x.x  x.x.x.x (subnet mask) outside

and only two lines

ssh x.x.x.x (inside IP's) inside

[troullier00]

The network or ip address of the computer you use must be represented in the ssh configuration statement. Also if your coming in from the Internet side you will need the outside ( or whatever your interface is named) keyword in your ssh statement.

If this is your first time you should probably set it up on the inside interface to test it. Once you get it to work you can set it up on the outside for your remote location.

Sent from Cisco Technical Support iPhone App

[jstewart73]

I was hoping use iSSH from my iPhone. So when I'm on the AT&T network I think it's a 10.1.x.x IP and it isn't static (I don't think)

[troullier00]

If you do plan on using your iPhone you should look into using a VPN. The iPhone does support Cisco VPN access.

[jstewart73]

There's a app to VPN app for a PIX 515. You have a link or app name?

I'm not positive but I thought I read some where the VPN 3000 Series do not support  the iPhone VPN capabilities.

[troullier00]

I'm not sure if there is an APP, but there is a Cisco VPn cofnguraiton setup for the iPhone under Sertings > General > Network > VPN. I have never set it up with a PIX so you will need to search online or find someone else to help you.

[jstewart73]

From what I have found it doesn't look like I can with this old of a PIX.

[Jay Johnston]

Ja,

Are you trying to get SSH access to your PIX working to determine why your internet access gets cut off periodically?

Take a look at this thread for some potential causes of your internet access going down periodically (whereby a PIX reboot fixes things):

https://supportforums.cisco.com/message/3392212#3392212

Jay

[jstewart73]

I am clearly not a cisco tech but have editted the configuration some (ie setup a syslog server and editted a couple of IPs).  I have been trying to pinpoint this internet issue for months thinking it was the server causing it.  HP (bless their hearts) has replaced the guts of the server. Then a few months back realized the culprit is the PIX. 

So for a short fix I was hoping to be able to access the PIX remotely, when is cuts off the network, and was hoping to be able reboot it remotely so I don't have to drive in.  I have been logging and nothing on the logs really shows why it would be doing that....  I do get

%PIX-3-313001: Denied ICMP type=3, code=3 from 155.229.56.214 on interface 0

I don't know this IP either - Would this cause the PIX to cut off for security reasons?