10-27-2012 01:52 PM - edited 03-11-2019 05:15 PM
Hi Everyone.
I have ASA connected to Switch.
This is outside connection.
I was trying to Telnet to ASA from Switch which has outside connection to ASA.
I config the command
telnet 192.168.0.0 255.255.0.0 outside
Still from Switch i am unable to telnet to ASA ?
ASA has default route to switch with route outside command
Need to know things below
1>Is this possible to Telnet to both outside and inside interface of ASA from the nei switch which is on outside interface of ASA ??
Solved! Go to Solution.
10-27-2012 01:56 PM
Hello,
Telnet is not allowed to the lowest security level interface of the ASA.
SSH will do it ( security purposes)
Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)
Regards
10-27-2012 02:01 PM
Hello,
So this means that outside interface is never allowed telnet by design right?
Correct,
As I mention on my previous post
Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)
Regards
Remember to rate all of the helpful posts
10-27-2012 01:56 PM
Hello,
Telnet is not allowed to the lowest security level interface of the ASA.
SSH will do it ( security purposes)
Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)
Regards
10-27-2012 01:58 PM
Hi Julio,
So this means that outside interface is never allowed telnet by design right?
Also is this possible to telnet to inside interface from outside ?
Thanks
Mahesh
10-27-2012 02:01 PM
Hello,
So this means that outside interface is never allowed telnet by design right?
Correct,
As I mention on my previous post
Also you cannot access a distant-interface, this means from an inside user you will be able to access inside interface but traffic to outside interface ip address will be denied no matter what ( Security desing meassure)
Regards
Remember to rate all of the helpful posts
10-27-2012 02:08 PM
Many thanks Julio
Regards
Mahesh
10-27-2012 02:11 PM
Hello Mahesh,
Thanks for the rating, my pleasure to help
Regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide