Unable to SSH ASA using IP works fine with hostname

[mahesh18]

                   Hi Everyone,

I am able to access ASA  via hostname but with IP address it does not work.

Need to know what config i need to put so i am able to access it using IP by ssh and ASDM

ASA is 5520 version is 8

Thanks

Mahesh

[varrao]

Hi Mahesh,

You can follow this doc to troubleshoot the SSH and ASDM issues:

https://supportforums.cisco.com/docs/DOC-13012

Hope that helps,

Thanks,
Varun Rao
Security Team,
Cisco TAC

[mahesh18]

Hi Varun,

If you read my post carefully it says

i am unable to SSH  using IP address it works fine with hostname

Thanks

MAhesh

[Julio Carvajal · Accepted solution]

Hello,

Share the following:

Show run ssh

sh crypto key mypubkey rsa

Let me know the result

Julio

[mahesh18]

Hi Julio,

when i run sh run ssh

it shows IP address and masks  and

ssh timeout 5

ssh version 2

and other command shows

Usage: General Purpose Key

Modulus Size (bits): 1024

Usage: Encryption Key

Modulus Size (bits): 768

and they have few numbers

thanks

mahesh

[Julio Carvajal]

Hello

You need to allow ssh access,

So you want to access the ASA for SSH using the ASA ip address, what Ip address??? ( The one on the inside or outside interface)???

If it's inside do

ssh 0 0 inside

If its outside do

ssh 0 0 outside

You could be as specific as you want with the allow Ip addresses,

Regards,

Julio

[mahesh18]

Hi Julio,

I found the IP of ASA  it belongs to subinterface and  it has nameif  xnet

How can i find which  if this is inside or outside

Also it has valn config under interface.

also i found that  sh run ssh does  not show ASA  IP .

Thanks

Mahesh

[Julio Carvajal]

Hello,

Inside and outside were mentioned as an example, in your case it will be

ssh xnet 0 0

username cisco password cisco

aaa authentication ssh console LOCAL

Try that and let me know!!

Julio

[mahesh18]

Hi Julio,

So when you say this

ssh xnet 0 0

where 0 0 is IP and subnet mask of ASA IP which i can use to SSH?

Currently i can not config   below commands

username cisco password cisco

aaa authentication ssh console LOCAL

due to some reaons

Thanks

Mahesh

[Julio Carvajal · Accepted solution]

ssh xnet 0 0 Means:

          Any IP can access the XNET interface ip address for SSH

Now

username cisco password cisco

aaa authentication ssh console LOCAL

due to some reaons

What are the reasons if I may ask

[mahesh18]

Hi Julio,

As it is ASA  we can put ssh 0 0 as it is security device.

sorry also i found now it has management interface that has IP and i can access the ASA with Management IP.

Hostname of ASA when i do nslookup  on my pc shows different IP.

So in order to access the ASA  with hostname IP i need to run this comman

ssh 192.168.3.0 255.255.255.0 XNET ?

i can not config username command as it is not allowed currently  on the network

thanks for helping

Regards

Mahesh

[Julio Carvajal · Accepted solution]

Hello Mahesh,

You could be as restrictive and secure as you want with the ips that will access the ASA.

[mahesh18]

Hi Julio,

Many thanks again for answering all my questions.

Regards

Mahesh