cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
708
Views
0
Helpful
5
Replies

Telnet to ASA from Nei Switch

mahesh18
Level 6
Level 6

Hi Everyone.

I have ASA  connected to Switch.

This is outside connection.

I was trying to Telnet to ASA  from Switch which has outside connection to ASA.

I config the command

telnet 192.168.0.0 255.255.0.0 outside

Still from Switch i am unable to telnet to ASA ?

ASA  has default route to switch with route outside command

Need to know  things below

1>Is this possible to Telnet to both outside and inside interface of ASA  from the nei switch which is on outside interface of ASA  ??

2 Accepted Solutions

Accepted Solutions

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

Telnet is not allowed to the lowest security level interface of the ASA.

SSH will do it ( security purposes)

Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

Hello,

So this means that outside interface is never allowed telnet by design right?

Correct,

As I mention on my previous post

Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)

Regards

Remember to rate all of the helpful posts

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

5 Replies 5

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

Telnet is not allowed to the lowest security level interface of the ASA.

SSH will do it ( security purposes)

Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi Julio,

So this means that outside interface is never allowed telnet by design right?

Also is this possible to telnet to inside interface from outside  ?

Thanks

Mahesh

Hello,

So this means that outside interface is never allowed telnet by design right?

Correct,

As I mention on my previous post

Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)

Regards

Remember to rate all of the helpful posts

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Many thanks Julio

Regards

Mahesh

Hello Mahesh,

Thanks for the rating, my pleasure to help

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking for a $25 gift card