Pix SSH Question

[pmichaelson]

Several PIX 501 and a PIX 515E, seems when they are rebooted I can not gain access using ssh until I first access them with the PDM, something to do with the keys not being generated when trying ssh. Is there a way around this? Or am i missing something. all PIX's have 6.3(3)

[Patrick Iseli]

Yes , save your ssh key after the generation.

This happends when you boot without saving your key.

ca save all

Command reference:

hostename pix

domainname example.com

ca generate rsa key 1024

show ca mypubkey rsa

ca save all

See:http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727a6.html#wp1025120

And finaly allow ssh traffic to the PIX:

ssh Network 255.255.255.0 inside

ssh SupportIP 255.255.255.255 outside

ssh timeout 5

sincerely

Patrick

[phardy]

Félicitation Patrick pour ton top Netpro rating,

En esperant te revoir pour notre implantation

blade firewall-csm-ssl etc..

Patrick Hardy

STM

[Patrick Iseli]

A bientot :-)

Cordialement

Patrick

[pmichaelson]

Thanks, that was the command I was missing....

Phil