help required in configuring telnet

[sivakondalarao]

Hi,

We have two PIX 515E firewalls working in HA mode.

I wanted to configure telnet access to firewalls from outside interface.

PIX version is 6.3(5)

I kept PC outside to outside interfaces.

PIX outside IP is 10.10.200.3, inside IP is 10.10.202.5 corresponding virtual IPs are 10.10.200.2 and 10.10.202.7

I have tried following configurations:

pix(config)#telnet 0 0 inside

pix(config)#telnet 0 0 outside

pix(config)#telnet 10.10.200.0 255.255.255.0 outside

pix(config)#telnet 10.10.202.0 255.255.255.0 inside

pix(config)#telnet 10.10.200.200 255.255.255.255 outside

I am able to telnet from internal interface side using inside ip address.

But from outside test pc with IP 10.10.200.200 I am not able to telnet to PIX.

I enabled logging console 5.

when I tried to telnet to outside virtual IP it is not showing any traffic to firewall.

If I try to outside interface I am able to see the traffic like

packets received from source 10.10.200.200 to 10.10.200.3

any help in this configuration. I wanted to telnet firewall from test pc.

Regards

SKRAO

[m.sir · Accepted solution]

HI SKRAO,

from security reasons is not possible to telnet to outside interface there is no way how to permit this you need you ssh instead of telnet

here is more info about setting ssh

http://www.ciscopress.com/articles/article.asp?p=25342&seqNum=3&rl=1

M.

Hope that helps rate if it does

[sivakondalarao]

Thanks for your reply.

Regards

SKRAO