SSH from outside through FW to inside switch

[john.wright]

We have firewall setup to allow ssh from a single public address to one of our switches inside the firewall.

I had Cisco TAC examine acl rules and all is well.

However the ssh connection always times out.

SSH works fine inside.

Anybody know what could be the problem?

[Tim Y]

Hi,

Can you post the configuration? I'd want to verify the ACL and NAT.

If those check out then I'd ask if Unicase RPF is enabled, if the routing inside is symmetrical, if there are any ACLs configured on the switch that prevent SSH from a certain source IP (the NAT'd IP)

Regards,

Tim

[Richard Burts]

We would also want to check to determine whether access-class was configured, and if so what it permits and what it denies, which might be what Tim meant about ACLs or might be different. So posting the config would be helpful.

HTH

Rick