not able to SSH connecct

Hello

I have configured the Cisco ASA5510 firewall, but I am facing the problem with ssh login, I gave ssh for inside and outside access, but I'm getting "server... error" I activated LOCAL for ssh and HTTP authentication. and I am able to developed device over HTTP by using ASDM, but not not be able to access from the outside.

Please find the configuration

Thanks in advance

concerning

Aurélie

ASA Version 8.2 (1)

!

hostname ASA5510

domain default.domain.invalid

activate the encrypted password of Nbxmt7LFbcxtLo.o

2KFQnbNIdI.2KYOU encrypted passwd

names of

name 10.251.38.0 SAP_remote

!

interface Ethernet0/0

nameif inside

security-level 100

IP 192.168.1.1 255.255.255.0

!

interface Ethernet0/1

nameif outside

security-level 0

IP xxx.xxx.xxx.xxx 255.255.255.252

!

interface Ethernet0/2

Shutdown

No nameif

no level of security

no ip address

!

interface Ethernet0/3

Shutdown

No nameif

no level of security

no ip address

!

interface Management0/0

Shutdown

No nameif

no level of security

no ip address

!

passive FTP mode

DNS server-group DefaultDNS

domain default.domain.invalid

inside_nat0_outbound to access ip 192.168.1.0 scope list allow 255.255.255.0 SAP_remote 255.255.255.128

outside_cryptomap to access ip 192.168.1.0 scope list allow 255.255.255.0 SAP_remote 255.255.255.128

outside_cryptomap_1 to access ip 192.168.1.0 scope list allow 255.255.255.0 SAP_remote 255.255.255.128

pager lines 24

Enable logging

asdm of logging of information

Within 1500 MTU

Outside 1500 MTU

ICMP unreachable rate-limit 1 burst-size 1

ICMP allow any inside

ICMP allow all outside

ASDM image disk0: / asdm - 621.bin

don't allow no asdm history

ARP timeout 14400

Global 1 interface (outside)

NAT (inside) 0-list of access inside_nat0_outbound

NAT (inside) 1 0.0.0.0 0.0.0.0

Route outside 0.0.0.0 0.0.0.0 115.115.169.241 1

Timeout xlate 03:00

Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

timeout tcp-proxy-reassembly 0:01:00

dynamic-access-policy-registration DfltAccessPolicy

No snmp server location

No snmp Server contact

Server enable SNMP traps snmp authentication linkup, linkdown cold start

Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

Crypto ipsec transform-set ESP-AES-128-SHA aes - esp esp-sha-hmac

Crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac

Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac

Crypto ipsec transform-set ESP-AES-256-SHA 256 - aes - esp esp-sha-hmac

Crypto ipsec transform-set ESP-AES-128-MD5-esp - aes esp-md5-hmac

Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac

Crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac

Crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac

Crypto ipsec transform-set ESP-3DES-MD5-esp-3des esp-md5-hmac

life crypto ipsec security association seconds 28800

Crypto ipsec kilobytes of life - safety 4608000 association

card crypto outside_map 1 match address outside_cryptomap_1

outside_map 1 set of peer XXX.XXX crypto card. XXX.20

card crypto outside_map 1 the value transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

card crypto outside_map 2 match address outside_cryptomap

card crypto outside_map 2 pfs set group5

outside_map 2 peer XXX.XXX crypto card game. XXX.20

card crypto outside_map 2 the value transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA MD5-ESP-3DES ESP-DES-SHA ESP-DES-MD5

outside_map interface card crypto outside

crypto ISAKMP allow inside

crypto ISAKMP allow outside

crypto ISAKMP policy 10

preshared authentication

3des encryption

sha hash

Group 5

lifetime 28800

Enable http server

http 0.0.0.0 0.0.0.0 inside

http 0.0.0.0 0.0.0.0 outsde

SSH 0.0.0.0 0.0.0.0 inside

SSH 0.0.0.0 0.0.0.0 outsde

Telnet 0.0.0.0 0.0.0.0 inside

Telnet timeout 5

SSH timeout 5

Console timeout 0

a basic threat threat detection

Statistics-list of access threat detection

no statistical threat detection tcp-interception

username test1234 encrypted password /FzQ9W6s1KjC0YQ7

username, password cisco1234 5sSb... e9ZNWMmk2e encrypted privilege 15

type of remote control-p2p-vpn tunnel-group ipsec-l2l

tunnel-group Remote-p2p-vpn ipsec-attributes

pre-shared-key *.

tunnel-group XXX.XXX. XXXX.20 type ipsec-l2l

tunnel-group XXX.XXX. XXXX.20 ipsec-attributes

pre-shared-key *.

!

class-map inspection_default

match default-inspection-traffic

!

!

type of policy-card inspect dns preset_dns_map

parameters

message-length maximum 512

maximum message length automatic of customer

Policy-map global_policy

class inspection_default

inspect the preset_dns_map dns

inspect the ftp

inspect h323 h225

inspect the h323 ras

inspect the netbios

inspect the rsh

inspect the rtsp

inspect the skinny

inspect esmtp

inspect sqlnet

inspect sunrpc

inspect the tftp

inspect the sip

inspect xdmcp

!

global service-policy global_policy

context of prompt hostname

Cryptochecksum:83eab0b7ae2d2d9e74f8ea0b005076ea

: end

Hello

You issue the command

ASA (config) # crypto key generate rsa 2048 module

So that you can use SSH.

EDIT: I suggest narrowing of the source address from where you can connect to the ASA from 'outside' if possible.

-Jouni

Tags: Cisco Security

Similar Questions

  • Not able to configure SSH

    Hello

    I use a router in 1841. My question is that I'm not able to configure SSH into the router, problem of any IOS?

    SH version

    Software Cisco IOS, 1841 Software (C1841-IPBASE-M), Version 12.4 (1 c), FREEING

    FTWARE (fc1)

    Hi knani

    You are running IP BASE set function ios on your router, you need to update the same for Advanced Security Services or feature of the Services SP logs for SSH support in your router...

    http://www.Cisco.com/en/us/products/SW/iosswrel/ps5460/index.html

    regds

  • My iPad is not able to connect to my wi - fi network. I made an update to my router on my first laptop and I can't get an internet connecction on my iPad.

    My iPad is not able to connect to my wi - fi network.  I made an update to my router on my first laptop and I can't get an internet connecction on my iPad.  I'm invited to a password, but don't know what it is.  I'm looking for the password?

    Assuming that you have a wireless router at home that you need to know the wireless network SSID, encryption type (IE. WPA2 or WPA for example) and the encryption key and password / password.

    Many routers appear encryption key wireless to plain text. Copy in the iPad. Check the router site users manual or support to help manufacturers to enter the config pages.

    If the router does not have the key, you can also see in the properties Win 7 Wireless for your home network. Open network and sharing Center and click on Manage wireless networks left. Right click on your wireless network and select Properties. Click theSecurity tab and checkShow characters . Provide the administrator password to see the key.

    http://sdrv.Ms/Spor94

    More help from Apple...

    http://www.Apple.com/support/iPad/Assistant/WiFi/

    Apple iPad WiFi support forums...

    https://discussions.Apple.com/community/iPad/using_ipad?view=discussions#/?tagSet=1188

  • Sun Solaris 5.10 - SSH 1.1.3 - Not able to connect to the server by ssh - Urgent

    Hello
    I am not able to coonect to a server by using the code below.

    If I try the same code on the server to connect it self, it works well. But when I try to connect to another server gives the error below. And I use the IBM Jdk when getting this error. Y at - it a setting to avoid this error.

    Error:
    INFO: Add /usr/jdk/instances/jdk1.6.0/jre/lib/ext/sunpkcs11.jar to the CLASSPATH of the extension
    ConfigurationLoader
    November 30, 2010 16:33:12 < clinit > com.sshtools.j2ssh.transport.publickey.SshKeyPairFactory
    INFO: Loading public key algorithms
    Error so that SFTP
    java.util.NoSuchElementException
    at java.util.StringTokenizer.nextToken(StringTokenizer.java:332)
    at java.util.StringTokenizer.nextElement(StringTokenizer.java:390)
    to com.sshtools.j2ssh.transport.AbstractKnownHostsKeyVerification. < init >(Unknown Source)
    to com.sshtools.j2ssh.transport.ConsoleKnownHostsKeyVerification. < init >(Unknown Source)
    at com.sshtools.j2ssh.SshClient.connect (unknown Source)
    at fileTransfer.connectToServer(fileTransfer.java:18)
    at fileTransfer.main(fileTransfer.java:56)



    Code:
    public static boolean connectToServer (String serverIp, int serverPort, String userId, String password)
    {
    SFC SshClient = null;
    try {}
    System.out.println ("inside the Try to like his SFTP");
    ConfigurationLoader.initialize (false);
    System.out.println ("ConfigurationLoader");

    SFC = new SshClient();
    SFC. Connect (Ipserver, serverPort);
    System.out.println ("SFC. Connect");

    PasswordAuthenticationClient pwd = new PasswordAuthenticationClient();

    pwd.setUsername (userId);

    pwd.setPassword (password);

    int checkAuth = sfc.authenticate (pwd);
    System.out.println ("checkAuth" + checkAuth);

    If (checkAuth == 4) {}
    System.out.println ("AuthenticationProtocolState.Complete");

    SFTP SftpClient = sfc.openSftpClient ();
    sftp.Quit ();
    SFC. Disconnect();
    }
    on the other
    {
    throw new Exception ("invalid user name or password for the user");
    }
    }
    catch (System.Exception e)
    {
    System.out.println ("Error While SFTP");
    SFC. Disconnect();
    e.getStackTrace ();
    Returns false;
    }
    Returns true;
    }

    Swapped

    Sun Solaris 5.10 - SSH 1.1.3 - Not able to connect to the server by ssh - Urgent

    @O.P.
    Don't, don't.
    In the future, to choose the most appropriate forum and make your post.
    Swap shall be the same as the rude spamming.
    I'm not aware of any web-site-of-value forum that would promote the permutation in its directions on the label.

    ... and for what is "Urgent"?
    This web site is for the end-user community gather and discuss various topics in general conversations. Your time constraints are irrelevant. If you need real support for something, then log a support case and pay for a quick response.

    See the FAQ in the link at the top of the page.

  • Could not able to create a fence for RHEL Cluster

    Dear all,

    We have configured the UCS successfully Manager & got OS installed, LUN is mapped to servers.

    We have given a static ip address for KVM access on inventory... > tab CIMC & tired to use UCS Manager IP for the configuration of fencing, but we do not succeed.

    We could not even be able to ssh to the MMIC balde.  Inband IP by blade is essential for the configuration of the fence... We did not pool Inband & policy for blades.

    Ask that you suggest best practices to configure fencing & clustering.

    Thanks in advnace.

    Kind regards

    Gopi G

    Hey Gopi

    In case of series b servers or UCSM c-series servers, better to use fence_cisco_ucs agent managed. See the following links

    https://supportforums.Cisco.com/discussion/11612711/how-can-i-configure-...

    https://access.redhat.com/solutions/31225

  • Download sierra MacOS in app store was interrupted, now am not able to download again, because it shows downloaded in the app store.

    I was downloading the new MacOS Sierra, and my connection was interrupted, as my system rebooted to update safari, now am not able to download the operating system again as it shows downloaded on the App Store.

    Look in your application for this?

    "Install macOS Sierra.app.

  • Conectivity test that my pc can't find my iphone so I'm not able to back up or synchronize it with my pc

    updated to ios 10.0.1 and now when I run the conectivity test my pc can't find my iphone so I'm not able to back up or synchronize it with my pc. everytime I connect my phone to my PC the pc revealed the companion phone which is no use to me as I want to get back to the top of my IPhone and syncing old content like movies without having to use my wireless

    You have restarted your computer?

    If iTunes does not recognize your iPhone, iPad or iPod - https://support.apple.com/HT204095

    Device are not not immediately after the upgrade - https://discussions.apple.com/thread/6573744 - try to restart

    Make sure you use the original or a spare cord Apple. Some third-party cables transfer that power and no data signal.apple.com/message/28002758#28002758

    https://discussions.apple.com/message/29154537#29154537 - removed then reinstalled iTunes application

    July 2016 Lawrence_Finch post - https://discussions.apple.com/message/30402529#message30402529 - connection dirty?

  • I would use Yuanti SC police for my web development project. However, my developer is not able to use the file .ttc I extracted from the library of fonts, and .ttf, .otf .woff formats not available anywhere on the web.

    I would use Yuanti SC police for my web development project. However, my developer is not able to use the file .ttc I extracted from the library of fonts, and .ttf, .otf .woff formats not available anywhere on the web. Please, let me know how can I use this font for my project.

    Thank you

    Anton

    Unless the site you develop is for the Asian market, I don't know why you want to use that particular font. The Basic, standard and digital alphabet punctuation glyphs has sans serif, Roman characters, but the rest is thousands of Kanji characters. While you can use the font .ttf and .otf and web fonts, it would be very unusual to use one so great. Pages should load quickly and 78 MB, with a value of faces to download for those who have connections slow Internet is not fast.

    I would take a different font without serifs. There are literally thousands who look identical or virtually identical to Yuanti.

    131 free and high quality without font serif to choose here. I'm sure you can find a desired.

  • Not able to restore iphone6 due to error code "latest version of itunes is not installed", however the latest version of itunes is installed.

    Not able to restore the iphone 6 due to the error "latest version of itunes is not installed", however itunes version 11.4 is installed.

    11.4 is not the latest version of iTunes.

    12.4.3 is the latest version of iTunes.

    It requires Windows 7 or later or OS X 10.8.5 or higher.

  • not able to install firefox

    Due to some problem, I ran an adware removal program
    After that not able to start firefox as error has been reported could not read the contact of your system administrator (display closed) configuration file
    Removed the old firefox and tried to install the new firefox downloaded but still getting the same error
    Please help how to overcome this problem

    The solution is the perfect answer if the system is infected with malware

    COR - el said

    Do a clean reinstall and delete the program folder before Firefox to (re) install a new copy of the current version of Firefox.

    If possible to uninstall your current version of Firefox to clean the Windows registry and settings in the security software.

    • Do NOT remove the "personal data" when you uninstall your current version of Firefox, because this will remove all profile folders and you lose personal data such as bookmarks and passwords including data profiles created by other versions of Firefox.

    Delete the program folder Firefox before installing newly downloaded copy of the Firefox installer.

    • (32-bit Windows) "C:\Program Files\Mozilla Firefox\"
    • (Windows 64 bit) "C:\Program Files (x 86) \Mozilla.

    Your personal data such as bookmarks are stored in the Firefox profile folder, so you will not lose data when you uninstall and (re) install or update Firefox, but make sure you do NOT delete personal data when you uninstall Firefox which removes all Firefox profile folders and you lose your data.

  • My ability to thunderbird to receive the mail suddenly stop and it worked before. What can be the reason? Now, I'm not able to receive all e-mails.

    My ability to thunderbird to receive the mail suddenly stop and it worked before. What can be the reason? Now, I'm not able to receive all e-mails.

    This forum is the official place to support Thunderbird. There is no phone support.
    If you think that this helps to explain the problem, you can add a screenshot to your message.
    You are supposed to follow instructions and suggestions that precede.

  • the latest version of firefox, I have now, I'm not able to choose google as my searchengine. Please fix.

    Since the last version of firefox has been downloaded to my computer automatically, I'm not able to select an as before search engine.
    I can't select the google search engine. The only one I have is ask.com, and I don't like it at all. Please change this.
    Thank you
    Silke Lehnmann

    You can try to update Firefox and create a new profile.

    When you refresh/Reset Firefox then created a new profile and some personal data (bookmarks, history, cookies, passwords, data form) are automatically imported.
    The current profile folder will be moved to "Old data Firefox" folder on the desktop.
    Installed extensions and other customizations (toolbars, Pref.) that you have made are lost and must be redone.

  • I am not able to change the video quality for you tube. There are only two options 360 and Auto. Please help me.

    Hi I am experiencing strange problem for 15 to 20 days and I am not able to change the video quality for you tube. There are only two options 360 and Auto. Help me please if you can because I have a slow internet connection and I want to play video at 240, as it was before. Thanks in advance for your help.

    Could check you whether YouTube is to serve its HTML5 player or the player based on Flash? If you right click on the drive, short a context menu should appear. If the full Firefox context menu is displayed, press and release the ALT key to erase that. The last line of the menu short usually indicates which player he is.

    I'll assume HTML5 because...

    On Windows 7, Firefox should show a wide range of formats in the HTML5 player. However, if some of the features of media are disabled, preventing video MP4 decoding, then YouTube offers only 360 p (with WebM coding).

    If you have intentionally disabled Media Foundation and/or DirectShow in topic: config, then perhaps you would prefer to use the YouTube Flash Player? There are a few Add-ons that can force YouTube to serve you a Flash drive. Either of them will do, you don't need both:

  • I bought an iphone6.  I registered. On the apple's music. But I'm not able to get the free month trial subscription

    I bought an iphone6.  I registered. On the apple's music. But I'm not able to get the free month trial subscription

    What happens when you try?

  • I'm not able to delete some of the files or some of the bookmarks in my favorites!

    I tried to delete/clear with the built-in library, this is the way that fails. It's strange, I can rename and replace the files, but I'm not able to get rid of them. I even installed Xmarks. When I remove the Xmarks, desappears file folder, but only in Xmarks, even after syncing with Xmarks.

    I'm despareted...

    Have you tried to delete the places.sqlite* files in case there is a problem?

    The file must have 2265 bookmarks, including folders and separators.

    See also this forum thread mozillaZine on playback of the files "jsonlz4": bookmarkbackup

Maybe you are looking for

  • e-mail is not downloaded for all account when I click get mail

    When I opened TBird it downloads the e-mail from my old default account only. This problem started when I added a second account and it's my fault. Once that TBird is open if I click on "Get the message" l Thunderbird gets my email to my old defaulta

  • Keep the faces when restoring iCloud

    Hello I use Photos on El Capitan 10.11.3 1.3. Recently my hard drive died, and I decided to clean install OS X on a new and then manually copy the files from a Time Machine backup needed. I chose to start a new photo library as well and synchronize i

  • Cannot access BIOS laptop

    Hi I just got a new Lenovo G50, use F1 and F2 to start my computer does not. Could someone please help me off course I got a 10 to win.

  • Not "Save as pdf" option for web printing "Smart Print" with IE9

    Just updated IE9 browser and noticed that there is no option 'Save as pdf' Smart for IE9 catalog as it was in older versions of smart Web printing for the IE8 and other earlier versions? Are there ' work around ' way, apart from the "Print Screen" he

  • H9 - 1215t: connect a drive hard 3rd

    I have a H9 - 1215t with a motherboard IPMMB-FM (Formosa) (http://support.hp.com/us-en/document/c03132942 - 4 Sata connectors on the motherboard are used for 2 hard drives and optical drives 2. There is a SATA5 open (black) and a SATA4B3 (red).  It s