SSH connection from outside interface

[Inbound_IT]

Hello,

I am setting up a VPN connection between our main site and a remote location. (currently using our backup ADSL line before sending over)

I have setup debug SSH on the console

The tunnel works fine, and i can open an SSH session from the inside network, but when i try to initiate the SSH connection from outside through the VPN , i don't see anything on the console.

To eliminate potential problem with ACL, i have set up outside access_in extended permit any any

Still the connection does not work and i get the following message "closed by remote host"

Any idea would be appreciated

Rgds

Laurent

[mizoran78]

Can you connect via SSH at all or you don't get connected just from outside?

[Inbound_IT]

Hello,

From the inside network it works.

I also have the same kind of issue with the ASDM

Rgds

Laurent

[mizoran78]

Next question. Did you allow it from outside?

Basically you should have one such line in config

ssh 0.0.0.0 0.0.0.0 outside

or

ssh A.B.C.D 255.255.255.255 outside

where A.B.C.D is the exact IP address you are trying to connect from.

ASDM access works in similar way, but instead of ssh we use http.

Hope this helps

Zoran

[mizoran78]

Btw, outside is just the name of the interface. It could be different in your setup. You shoud put the name you have used to name your outside interface. I hope now it is clear enough.

Z

[mizoran78]

Hm. Have you tried to specify allowed ssh access from inside?

ssh 10.74.97.0 255.255.255.0 inside

Z

[Inbound_IT]

That’s what I have configured…

ssh 10.74.97.0 255.255.255.0 outside

http 10.74.97.72 255.25.255.255 outside

(the IP I am trying to connect from is 10.74.97.72)

Could I be something with the line itself ??? latency ??

If have tried the following command as well without success :

Management-access inside

And

Management-access outside

As I understand, the fact that I try to access through the VPN means that I am coming from the inside….. right ??

Thanks for your help

[mizoran78]

But have you tried

ssh 10.74.97.0 255.255.255.0 inside

http 10.74.97.72 255.25.255.255 inside

and

Management-access inside

Z

[Inbound_IT]

Yes, I have tried all combinations

ssh 10.74.97.0 255.255.255.0 inside

ssh 10.74.97.0 255.255.255.0 outside

http 10.74.97.0 255.255.255.0 inside

http 10.74.97.0 255.255.255.0 outside

As I have set it up on a home ADSL line with poor quality and no QOS, I guess it can cause further problems.

I have to send the device to the remote office today, so I will continue to investigate next week.

Thanks a lot for your help

Have a good day

Laurent

[mizoran78]

I would not blame ADSL anyway, but I am relly getting empty of ideas Hopefully some Cisco guru will see this and help you.

Have a nice weekend!

Z