Telnet access for ASA 5510

[vinayak]

Dear All,

I am having Cisco ASA 5510 @ my office. i am usually remain out of office. so when problem occour its not possible for me to remote login in firewall using software like "PUTTY".

is this possible to configure telnet access to firewall from outside ?

[andamani · Accepted solution]

Hi,

You can configure Telnet on the outside interface of the ASA.

The following link will help you do so:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008069bf1b.shtml#telnet

Regards,

Anisha

P.S.: please mark this thread resolved if your query is answered.

[handsy]

Why can't you use putty and ssh in when you're outside the office? If you can telnet, then surely you could use putty!?

Telnet access on to a firewall is definitely not best practice!

[vinayak]

Dear Handsy,

Thanks for your post.

As i said i am using PUTTY to Remote login using telnet into my router. But i want same setting for firewall also.

Coz i am not able to access my firewall from outside network using PUTTY.

[handsy]

I still don't really understand that, but I'll take your word for it!

[vinayak]

Dear handsy,

i am sorry, But i think you didnt get me.

I am saying that i am able to login into Firewall using Putty when i am in my network (LAN).

But when i am outside in other network i am not able to Login in firewall using Putty .

my question is :: "Is it possible to configure firewall for TELNET access from outside network"

[Kureli Sankar]

Vinayak,

Did you generate an rsa key pair? You can only ssh to the outside. Telnet to the lowest security interface is not allowed by nature.

Here are the commands

conf t

cry key generate rsa modulus 1024

Refer this link if you have trouble connecting via ssh: https://supportforums.cisco.com/docs/DOC-13012

-KS

[handsy]

As Poonquzhali says, just configure ssh on the outside interface as well.

ssh outside

You can then putty in to the appliance the same as if you were in the office.

[vinayak]

Dear All,

I am not having public ip assign to my firewall. Before firewall i am having router to which i assigned public ip. & i assigned privet ip to my firewall.

is it possible to access that private ip from outside ?

[handsy]

A NAT command on the router before the firewall should solve that.