not able to SSH connecct
Hello
I have configured the Cisco ASA5510 firewall, but I am facing the problem with ssh login, I gave ssh for inside and outside access, but I'm getting "server... error" I activated LOCAL for ssh and HTTP authentication. and I am able to developed device over HTTP by using ASDM, but not not be able to access from the outside.
Please find the configuration
Thanks in advance
concerning
Aurélie
ASA Version 8.2 (1)
!
hostname ASA5510
domain default.domain.invalid
activate the encrypted password of Nbxmt7LFbcxtLo.o
2KFQnbNIdI.2KYOU encrypted passwd
names of
name 10.251.38.0 SAP_remote
!
interface Ethernet0/0
nameif inside
security-level 100
IP 192.168.1.1 255.255.255.0
!
interface Ethernet0/1
nameif outside
security-level 0
IP xxx.xxx.xxx.xxx 255.255.255.252
!
interface Ethernet0/2
Shutdown
No nameif
no level of security
no ip address
!
interface Ethernet0/3
Shutdown
No nameif
no level of security
no ip address
!
interface Management0/0
Shutdown
No nameif
no level of security
no ip address
!
passive FTP mode
DNS server-group DefaultDNS
domain default.domain.invalid
inside_nat0_outbound to access ip 192.168.1.0 scope list allow 255.255.255.0 SAP_remote 255.255.255.128
outside_cryptomap to access ip 192.168.1.0 scope list allow 255.255.255.0 SAP_remote 255.255.255.128
outside_cryptomap_1 to access ip 192.168.1.0 scope list allow 255.255.255.0 SAP_remote 255.255.255.128
pager lines 24
Enable logging
asdm of logging of information
Within 1500 MTU
Outside 1500 MTU
ICMP unreachable rate-limit 1 burst-size 1
ICMP allow any inside
ICMP allow all outside
ASDM image disk0: / asdm - 621.bin
don't allow no asdm history
ARP timeout 14400
Global 1 interface (outside)
NAT (inside) 0-list of access inside_nat0_outbound
NAT (inside) 1 0.0.0.0 0.0.0.0
Route outside 0.0.0.0 0.0.0.0 115.115.169.241 1
Timeout xlate 03:00
Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-registration DfltAccessPolicy
No snmp server location
No snmp Server contact
Server enable SNMP traps snmp authentication linkup, linkdown cold start
Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac
Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac
Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac
Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac
Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac
Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac
Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac
life crypto ipsec security association seconds 28800
Crypto ipsec kilobytes of life - safety 4608000 association
card crypto outside_map 1 match address outside_cryptomap_1
outside_map 1 set of peer XXX.XXX crypto card. XXX.20
card crypto outside_map 1 the value transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
card crypto outside_map 2 match address outside_cryptomap
card crypto outside_map 2 pfs set group5
outside_map 2 peer XXX.XXX crypto card game. XXX.20
card crypto outside_map 2 the value transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5
outside_map interface card crypto outside
crypto ISAKMP allow inside
crypto ISAKMP allow outside
crypto ISAKMP policy 10
preshared authentication
3des encryption
sha hash
Group 5
lifetime 28800
Enable http server
http 0.0.0.0 0.0.0.0 inside
http 0.0.0.0 0.0.0.0 outsde
SSH 0.0.0.0 0.0.0.0 inside
SSH 0.0.0.0 0.0.0.0 outsde
Telnet 0.0.0.0 0.0.0.0 inside
Telnet timeout 5
SSH timeout 5
Console timeout 0
a basic threat threat detection
Statistics-list of access threat detection
no statistical threat detection tcp-interception
username test1234 encrypted password /FzQ9W6s1KjC0YQ7
username, password cisco1234 5sSb... e9ZNWMmk2e encrypted privilege 15
type of remote control-p2p-vpn tunnel-group ipsec-l2l
tunnel-group Remote-p2p-vpn ipsec-attributes
pre-shared-key *.
tunnel-group XXX.XXX. XXXX.20 type ipsec-l2l
tunnel-group XXX.XXX. XXXX.20 ipsec-attributes
pre-shared-key *.
!
class-map inspection_default
match default-inspection-traffic
!
!
type of policy-card inspect dns preset_dns_map
parameters
message-length maximum 512
maximum message length automatic of customer
Policy-map global_policy
class inspection_default
inspect the preset_dns_map dns
inspect the ftp
inspect h323 h225
inspect the h323 ras
inspect the netbios
inspect the rsh
inspect the rtsp
inspect the skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect the tftp
inspect the sip
inspect xdmcp
!
global service-policy global_policy
context of prompt hostname
Cryptochecksum:83eab0b7ae2d2d9e74f8ea0b005076ea
: end
Hello
You issue the command
ASA (config) # crypto key generate rsa 2048 module
So that you can use SSH.
EDIT: I suggest narrowing of the source address from where you can connect to the ASA from 'outside' if possible.
-Jouni
Tags: Cisco Security
Similar Questions
-
Hello
I use a router in 1841. My question is that I'm not able to configure SSH into the router, problem of any IOS?
SH version
Software Cisco IOS, 1841 Software (C1841-IPBASE-M), Version 12.4 (1 c), FREEING
FTWARE (fc1)
Hi knani
You are running IP BASE set function ios on your router, you need to update the same for Advanced Security Services or feature of the Services SP logs for SSH support in your router...
http://www.Cisco.com/en/us/products/SW/iosswrel/ps5460/index.html
regds
-
My iPad is not able to connect to my wi - fi network. I made an update to my router on my first laptop and I can't get an internet connecction on my iPad. I'm invited to a password, but don't know what it is. I'm looking for the password?
Assuming that you have a wireless router at home that you need to know the wireless network SSID, encryption type (IE. WPA2 or WPA for example) and the encryption key and password / password.
Many routers appear encryption key wireless to plain text. Copy in the iPad. Check the router site users manual or support to help manufacturers to enter the config pages.
If the router does not have the key, you can also see in the properties Win 7 Wireless for your home network. Open network and sharing Center and click on Manage wireless networks left. Right click on your wireless network and select Properties. Click theSecurity tab and checkShow characters . Provide the administrator password to see the key.
More help from Apple...
http://www.Apple.com/support/iPad/Assistant/WiFi/
Apple iPad WiFi support forums...
https://discussions.Apple.com/community/iPad/using_ipad?view=discussions#/?tagSet=1188
-
Hello
I am not able to coonect to a server by using the code below.
If I try the same code on the server to connect it self, it works well. But when I try to connect to another server gives the error below. And I use the IBM Jdk when getting this error. Y at - it a setting to avoid this error.
Error:
INFO: Add /usr/jdk/instances/jdk1.6.0/jre/lib/ext/sunpkcs11.jar to the CLASSPATH of the extension
ConfigurationLoader
November 30, 2010 16:33:12 < clinit > com.sshtools.j2ssh.transport.publickey.SshKeyPairFactory
INFO: Loading public key algorithms
Error so that SFTP
java.util.NoSuchElementException
at java.util.StringTokenizer.nextToken(StringTokenizer.java:332)
at java.util.StringTokenizer.nextElement(StringTokenizer.java:390)
to com.sshtools.j2ssh.transport.AbstractKnownHostsKeyVerification. < init >(Unknown Source)
to com.sshtools.j2ssh.transport.ConsoleKnownHostsKeyVerification. < init >(Unknown Source)
at com.sshtools.j2ssh.SshClient.connect (unknown Source)
at fileTransfer.connectToServer(fileTransfer.java:18)
at fileTransfer.main(fileTransfer.java:56)
Code:
public static boolean connectToServer (String serverIp, int serverPort, String userId, String password)
{
SFC SshClient = null;
try {}
System.out.println ("inside the Try to like his SFTP");
ConfigurationLoader.initialize (false);
System.out.println ("ConfigurationLoader");
SFC = new SshClient();
SFC. Connect (Ipserver, serverPort);
System.out.println ("SFC. Connect");
PasswordAuthenticationClient pwd = new PasswordAuthenticationClient();
pwd.setUsername (userId);
pwd.setPassword (password);
int checkAuth = sfc.authenticate (pwd);
System.out.println ("checkAuth" + checkAuth);
If (checkAuth == 4) {}
System.out.println ("AuthenticationProtocolState.Complete");
SFTP SftpClient = sfc.openSftpClient ();
sftp.Quit ();
SFC. Disconnect();
}
on the other
{
throw new Exception ("invalid user name or password for the user");
}
}
catch (System.Exception e)
{
System.out.println ("Error While SFTP");
SFC. Disconnect();
e.getStackTrace ();
Returns false;
}
Returns true;
}Swapped
Sun Solaris 5.10 - SSH 1.1.3 - Not able to connect to the server by ssh - Urgent
@O.P.
Don't, don't.
In the future, to choose the most appropriate forum and make your post.
Swap shall be the same as the rude spamming.
I'm not aware of any web-site-of-value forum that would promote the permutation in its directions on the label.... and for what is "Urgent"?
This web site is for the end-user community gather and discuss various topics in general conversations. Your time constraints are irrelevant. If you need real support for something, then log a support case and pay for a quick response.See the FAQ in the link at the top of the page.
-
Could not able to create a fence for RHEL Cluster
Dear all,
We have configured the UCS successfully Manager & got OS installed, LUN is mapped to servers.
We have given a static ip address for KVM access on inventory... > tab CIMC & tired to use UCS Manager IP for the configuration of fencing, but we do not succeed.
We could not even be able to ssh to the MMIC balde. Inband IP by blade is essential for the configuration of the fence... We did not pool Inband & policy for blades.
Ask that you suggest best practices to configure fencing & clustering.
Thanks in advnace.
Kind regards
Gopi G
Hey Gopi
In case of series b servers or UCSM c-series servers, better to use fence_cisco_ucs agent managed. See the following links
https://supportforums.Cisco.com/discussion/11612711/how-can-i-configure-...
-
I was downloading the new MacOS Sierra, and my connection was interrupted, as my system rebooted to update safari, now am not able to download the operating system again as it shows downloaded on the App Store.
Look in your application for this?
"Install macOS Sierra.app.
-
updated to ios 10.0.1 and now when I run the conectivity test my pc can't find my iphone so I'm not able to back up or synchronize it with my pc. everytime I connect my phone to my PC the pc revealed the companion phone which is no use to me as I want to get back to the top of my IPhone and syncing old content like movies without having to use my wireless
You have restarted your computer?
If iTunes does not recognize your iPhone, iPad or iPod - https://support.apple.com/HT204095
Device are not not immediately after the upgrade - https://discussions.apple.com/thread/6573744 - try to restart
Make sure you use the original or a spare cord Apple. Some third-party cables transfer that power and no data signal.apple.com/message/28002758#28002758
https://discussions.apple.com/message/29154537#29154537 - removed then reinstalled iTunes application
July 2016 Lawrence_Finch post - https://discussions.apple.com/message/30402529#message30402529 - connection dirty?
-
I would use Yuanti SC police for my web development project. However, my developer is not able to use the file .ttc I extracted from the library of fonts, and .ttf, .otf .woff formats not available anywhere on the web. Please, let me know how can I use this font for my project.
Thank you
Anton
Unless the site you develop is for the Asian market, I don't know why you want to use that particular font. The Basic, standard and digital alphabet punctuation glyphs has sans serif, Roman characters, but the rest is thousands of Kanji characters. While you can use the font .ttf and .otf and web fonts, it would be very unusual to use one so great. Pages should load quickly and 78 MB, with a value of faces to download for those who have connections slow Internet is not fast.
I would take a different font without serifs. There are literally thousands who look identical or virtually identical to Yuanti.
131 free and high quality without font serif to choose here. I'm sure you can find a desired.
-
Not able to restore the iphone 6 due to the error "latest version of itunes is not installed", however itunes version 11.4 is installed.
11.4 is not the latest version of iTunes.
12.4.3 is the latest version of iTunes.
It requires Windows 7 or later or OS X 10.8.5 or higher.
-
Due to some problem, I ran an adware removal program
After that not able to start firefox as error has been reported could not read the contact of your system administrator (display closed) configuration file
Removed the old firefox and tried to install the new firefox downloaded but still getting the same error
Please help how to overcome this problemThe solution is the perfect answer if the system is infected with malware
COR - el said
Do a clean reinstall and delete the program folder before Firefox to (re) install a new copy of the current version of Firefox.
- Download the installer of Firefox and save the file to the desktop
https://www.Mozilla.org/en-us/Firefox/all/
If possible to uninstall your current version of Firefox to clean the Windows registry and settings in the security software.
- Do NOT remove the "personal data" when you uninstall your current version of Firefox, because this will remove all profile folders and you lose personal data such as bookmarks and passwords including data profiles created by other versions of Firefox.
Delete the program folder Firefox before installing newly downloaded copy of the Firefox installer.
- (32-bit Windows) "C:\Program Files\Mozilla Firefox\"
- (Windows 64 bit) "C:\Program Files (x 86) \Mozilla.
- It is important to remove the Firefox program folder to delete all the files and make sure that there is no problem with the files that were the remains after uninstallation.
- http://KB.mozillazine.org/Uninstalling_Firefox
Your personal data such as bookmarks are stored in the Firefox profile folder, so you will not lose data when you uninstall and (re) install or update Firefox, but make sure you do NOT delete personal data when you uninstall Firefox which removes all Firefox profile folders and you lose your data.
- Download the installer of Firefox and save the file to the desktop
-
My ability to thunderbird to receive the mail suddenly stop and it worked before. What can be the reason? Now, I'm not able to receive all e-mails.
This forum is the official place to support Thunderbird. There is no phone support.
If you think that this helps to explain the problem, you can add a screenshot to your message.
You are supposed to follow instructions and suggestions that precede. -
Since the last version of firefox has been downloaded to my computer automatically, I'm not able to select an as before search engine.
I can't select the google search engine. The only one I have is ask.com, and I don't like it at all. Please change this.
Thank you
Silke LehnmannYou can try to update Firefox and create a new profile.
When you refresh/Reset Firefox then created a new profile and some personal data (bookmarks, history, cookies, passwords, data form) are automatically imported.
The current profile folder will be moved to "Old data Firefox" folder on the desktop.
Installed extensions and other customizations (toolbars, Pref.) that you have made are lost and must be redone. -
Hi I am experiencing strange problem for 15 to 20 days and I am not able to change the video quality for you tube. There are only two options 360 and Auto. Help me please if you can because I have a slow internet connection and I want to play video at 240, as it was before. Thanks in advance for your help.
Could check you whether YouTube is to serve its HTML5 player or the player based on Flash? If you right click on the drive, short a context menu should appear. If the full Firefox context menu is displayed, press and release the ALT key to erase that. The last line of the menu short usually indicates which player he is.
I'll assume HTML5 because...
On Windows 7, Firefox should show a wide range of formats in the HTML5 player. However, if some of the features of media are disabled, preventing video MP4 decoding, then YouTube offers only 360 p (with WebM coding).
If you have intentionally disabled Media Foundation and/or DirectShow in topic: config, then perhaps you would prefer to use the YouTube Flash Player? There are a few Add-ons that can force YouTube to serve you a Flash drive. Either of them will do, you don't need both:
-
I bought an iphone6. I registered. On the apple's music. But I'm not able to get the free month trial subscription
What happens when you try?
-
I'm not able to delete some of the files or some of the bookmarks in my favorites!
I tried to delete/clear with the built-in library, this is the way that fails. It's strange, I can rename and replace the files, but I'm not able to get rid of them. I even installed Xmarks. When I remove the Xmarks, desappears file folder, but only in Xmarks, even after syncing with Xmarks.
I'm despareted...
Have you tried to delete the places.sqlite* files in case there is a problem?
The file must have 2265 bookmarks, including folders and separators.
See also this forum thread mozillaZine on playback of the files "jsonlz4": bookmarkbackup
Maybe you are looking for
-
e-mail is not downloaded for all account when I click get mail
When I opened TBird it downloads the e-mail from my old default account only. This problem started when I added a second account and it's my fault. Once that TBird is open if I click on "Get the message" l Thunderbird gets my email to my old defaulta
-
Keep the faces when restoring iCloud
Hello I use Photos on El Capitan 10.11.3 1.3. Recently my hard drive died, and I decided to clean install OS X on a new and then manually copy the files from a Time Machine backup needed. I chose to start a new photo library as well and synchronize i
-
Hi I just got a new Lenovo G50, use F1 and F2 to start my computer does not. Could someone please help me off course I got a 10 to win.
-
Not "Save as pdf" option for web printing "Smart Print" with IE9
Just updated IE9 browser and noticed that there is no option 'Save as pdf' Smart for IE9 catalog as it was in older versions of smart Web printing for the IE8 and other earlier versions? Are there ' work around ' way, apart from the "Print Screen" he
-
H9 - 1215t: connect a drive hard 3rd
I have a H9 - 1215t with a motherboard IPMMB-FM (Formosa) (http://support.hp.com/us-en/document/c03132942 - 4 Sata connectors on the motherboard are used for 2 hard drives and optical drives 2. There is a SATA5 open (black) and a SATA4B3 (red). It s