Enable SSH access in Cisco ASA 5510

June 9th, 2010 | 5 Comments | Posted in Networking

Once you are done with the basic configuration of Cisco ASA 5510, the next step is to enable SSH access from remote computers internally or externally, Steps involved in configuring SSH is as follows

Firewall_5510#config t

Firewall_5510(config)# enable password xxxxx(your password)

Enable password is necessary to enable ssh access

Firewall_5510(config)# username test password test123

User name and password for connecting using ssh

Firewall_5510(config)# aaa authentication ssh console LOCAL

Different authentication can be  configured, like RADIUS, TATAC, etc.., here we specified Local authentication with user name and password mentioned above

Firewall_5510(config)# ssh 192.168.x.x 255.255.255.o inside

Permit  ssh access to firewall  from specified ip or subnet, inside

Firewall_5510(config)# domain-name TEST.ORG

Domain name of your company. RSA key is generated using domain name + firewall name combination

Firewall_5510(config)# crypto key generate rsa modulus 1024

Generate RSA key

You are done !!!!!!!!!!!!!!!!!!!!!!

now the firewall can be accessed from inside network………………………

Leave a Reply 21588 views, 19 today |

Author :

I am a Linux and Networking geek, Interest to learn more and fun to do new experiments, happy to share knowledge that I have learned and experienced in my life and carrier, also trying to learn more on Firewalls, Linux, Switching, Routing etc..............
Follow Discussion

5 Responses to “Enable SSH access in Cisco ASA 5510”

  1. vineeth Says:

    gr8

  2. jason Says:

    how would I allow ssh from 2 ip addresses?

  3. Anoop Says:

    @Jason,

    you can specify as many ip address/network you want with  ssh 192.168.x.x 255.255.255.o inside

  4. Duncan Says:

    How would i allow ssh connection from Home to my office ASA  . Would i need my Public ip address from Home or Private i p address ? Will it be on Outside interface?
    Regards,
    Duncan

Trackbacks

  1. Running Config d’un VPN Remote Access sur ASA 5500 Series – Influence PC  

Leave a Reply

You must be logged in to post a comment.


More in Networking (9 of 20 articles)