Campus allow ssh/https through pix.SOS

[gopal_prestel]

hi guys

im working on a campus network just got the network up and pix 535 has been installed, according to my knowledge pix will allow all traffic from high security interfaces to low security interface and i know its the truth.

my iisue is very simple i would like to allow ssh/ https traffic to pass through pix from inside interfaces, i shouldnt be havinmg any problem in that , but i guess im getting stuck somewhere, there is a HP server right in front of pix attached to the outside interface of pix , im not able to SSH that machine.i have allowed hhtps and ssh from outside interface and im getting my hitcounts so im presuming i have no problem in that , the campus network has public IPs spread across the campus and pix has only one interface thats inside interface with public IP just acting as a gateway for all incoming public ip and is doing identity NAT for all traffic.

im posting my runn-config, pls feel free to comment.

Shukky

India

[mostiguy]

What is the ip address of the hp box running ssh? What is the ip address of the host you are attempting to ssh from? Knowing that, we would have a better idea of whether your nat rules are ok.

[gopal_prestel]

hi

my pix's outside interface ip is 172.16.1.1 and Hp machine's IP is 172.16.1.2 , and im trying to ssh from a public IP machine form insid the campus via inside interface of PIX.

pix is not doing any xlation for any IP.

Shukky

India

[sachinraja]

hello shukky

when doing any data transfer between the inside to outside, you just need to check the nat rules. i notice that u have a default nat rule to nonat the traffic. there are also no ACLs associated with the inside interface, which means, ur config is right. are you sure that the routing is fine ? are you able to ping the HP server from the client PC ?? also , make sure, you are able to do SSH from the outside subnet to the server.

Raj

[froggy3132000]

You need to add ssh access to the internal interface.

ssh interface