Cisco PIX 525 Especificaciones descargar pdf (Pagina 325)

9-23

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 9 Accessing and Monitoring PIX Firewall

Using SSH for Remote System Management

Identifying the Host Using an SSH Client

Identify each host authorized to access the PIX Firewall console using SSH by entering the following

command:

[no] ssh ip_address [netmask] [interface_name]

To use this command:

• Replace ip_address with the IP address of the host or network authorized to initiate an SSH

connection to the PIX

Firewall.

• Replace netmask with the network mask for ip_address.

Note The netmask parameter is optional if you omit the interface name and if you use the default

subnet mask (255.255.255.255). The netmask parameter is required if you specify the

interface name or if you do not use the default subnet mask.

• Replace interface_name with the PIX Firewall interface name on which the host or network

initiating the SSH connection resides.

To specify the duration, in minutes, that a session can be idle before being disconnected, enter the following

command:

ssh timeout number

Replace number with a value from 1 to 60 (minutes). The default duration is 5 minutes.

To disconnect a specific session, enter the following command:

ssh disconnect session_id

Replace session_id with the identifier for the specific session that you want to disconnect. To display the

identifiers for the active sessions, use the show ssh sessions command.

To remove all ssh command statements from the configuration, enter the following command:

clear ssh

Use the no keyword to remove selected ssh command statements from the configuration.

Note To use SSH, your PIX Firewall must have a DES or 3DES activation key and you must

generate an RSA key-pair for the PIX

Firewall before clients can connect to the

PIX

Firewall console. Use the ca generate rsa key 512 command to generate a key; change

the modulus size from 512, as needed. After generating the RSA key, save the key using

the ca save all command.

1 2 ... 320 321 322 323 324 325 326 327 328 329 330 ... 465 466

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 325