Re: Telnet into Cisco Pix

kjanakiraman · ‎04-29-2002

Hi,

I have Cisco pix 515 with ios 5.1(2). I had installed it long back and everything was working fine. Now Suddenly i could not telnet into it. I checked the configuration and i have give telnet access to the inside network and the idle timeout is 15 minutes, but there is no harm to the general functionality. now i have to hyperterm for any changes in the configuration.

My inside netwrok is 192.168.x.x and 10.x.x.x.

telnet 192.168.x.x 255.255.255.0 inside

telnet 10.x.x.x 255.0.0.0 inside

These are the commands i have given for telnet access before and the same did not change. What may be the problem. Can some one Advice.

Thanks in Advance

gspencer · ‎04-29-2002

Hi,

Is there an access-list on applied to your inside interface? If so, are you allowing hosts telnet access to PIX. Try pinging your inside interface from the PC that you are trying to telnet from. Hope this lead you in the right direction to solving this problem.

kjanakiraman · ‎04-29-2002

Hi,

I have access-list for blocking some chat sites. That was configured very long back and after which also i was able to telnet. The access-list was applied to the inside interface. I am able to ping the inside interface of the Pix firewall.

ccoutts · ‎04-29-2002

Hello,

You could try specifying specfic hosts which are allowed to telnet to the PIX, using the following format, for example:

telnet 10.X.X.X 255.255.255.255 inside

Maybe, you could also check if there are any telnet sessions on the PIX which are preventing you connecting (a sh who from enable mode should show you this) - you can then kill any offending sessions. In addition, although you've probably checked this, make sure you are actually using port 23 for telnet, and not something else like ssh.

g.rodegari · ‎04-29-2002

You can telnet the pix on the inside interface only from an ip address of the same network.

The telnet command has higer priority over any configured access-list.

Bye

Graz.

kjanakiraman · ‎04-30-2002

I checked all the things. I typed sh who but nothing is connected. The access has been given to the entire class for telneting from inside. I checked with my backup configuration but there was no change in the configuration and all are fine. What might have went wrong?

Thanks in Advance

JOHN NIKOLATOS · ‎04-30-2002

This may seem trivial but did you reset your pix?

There may be an ARP issue. I have seen it do weird things. Either "clear arp" on firewall, machine and switch or turn power off on all of them and back on.

This will happen if you changed IP addresses and the switch or something gets confused.

kjanakiraman · ‎05-03-2002

Thanks a lot. The Reboot did it.