Remote work on PIX

[PETER KNOWLES]

I'm familiar, when working on router IOS, and modifying the ACL on the WAN, the ACL must be removed from the WAN (no ip access-croup...).

When working on a PIX via SSH, I'm assuming some similar technique is needed.

Is there some documentation on how to do this somebody could point me to?

Thank you!

[scottmac]

All you need is a statement telling the PIX what the acceptable source address (or address range) is.

telnet

and

SSH

Note that Telnet is never accepted at the "outside" interface. It's considered enough of security risk that Cisco does not permit it, even if the PIX aparently takes the configuration.

SSH is permitted, but in most of the older PIXOS versions (6.x and lower), only SSH version 1 works.

Good Luck

Scott

[PETER KNOWLES]

Thanks. We already have been able to successfully use SSH to get to the PIX.

My question is, when I start modifying the ACL on the WAN, will that terminate my SSH session?