Telnet and SSH access from the outside

[ddisalvo]

Is it possible to telnet to a pix 501 from the outside.

[jmia]

Hi -

Yes you can do this using SSH. Lots of document on CCO + www.google.com

Hope this helps --

[ddisalvo]

Are there any specific documents I should be looking at to start me off?

[scottmac]

You cannot Telnet from the outside, but you can use SSH. Remember that the SSH Cisco uses is only version 1, which is a little soft (security-wise).

I believe SSH came in on Version 6.X

You have to create a crypto key, then enter the command that states which source addresses to accept.

If you search the main site for "SSH and PIX", you should get a /some document that'll tell you the specifics.

Good Luck

Scott

[ddisalvo]

Thanks I found some good doc's but do I need a radius server to make this work?

[gparrish]

This should work for you:

ca generate rsa key 1024

show ca mypubkey rsa

ca save all

ssh x.x.x.x outside

Username: pix

Password: normal telnet password