cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
482
Views
0
Helpful
1
Replies

SSH will not connect through outside PIX 515 interface

gzullich
Level 1
Level 1

Hi I have an odd problem and hope someone may be able to throw me a pointer.

I have 2 PIX boxes, a 506 and a 515. I can connect to both with SSH from the inside int however the 515 will not accept connections from the outside int. The 506 is good both ways with all the same clients.

I turned on the debug ssh and nothing appears on the 515 when a connection is attempted (where the 506 displays a normal session when debugging).

All the client s/w works with the 506 from the outside however the 515 using TSSSH disconnects quickly with error 'the program does not understand the server's version of the protocol'. Putty simply fails to authenticate then says the server sent a disconnect.

Both are Ver;

Cisco PIX Firewall Version 6.3(1)

Cisco PIX Device Manager Version 3.0(1)

The 2 Configs (I changed my IP)...

ssh 205.123.123.123 255.255.255.255 outside (my IP)

ssh 192.168.1.88 255.255.255.255 inside

ssh timeout 10

ssh 205.123.123.123 255.255.255.255 outside (my IP)

ssh 0.0.0.0 0.0.0.0 inside

ssh timeout 60

Any one have any thoughts?

TIA

George

1 Reply 1

mostiguy
Level 6
Level 6

DId you try cranking up logging on putty?

Session - logging

Sounds strange. Which client works on the inside interface? DO both pixen have the 3des/aes activation key?

Review Cisco Networking for a $25 gift card