Cisco PIX 525 Especificaciones descargar pdf (Pagina 326)

9-24

Cisco PIX Firewall and VPN Configuration Guide

78-15033-01

Chapter 9 Accessing and Monitoring PIX Firewall

Using SSH for Remote System Management

Configuring Authentication for an SSH Client

To configure local authentication for an SSH client accessing the PIX Firewall, enter the following

command:

ssh -c 3des -1 pix -v ipaddress

The password used to perform local authentication is the same as the one used for Telnet access. The

default for this password is cisco. To change this password, enter the following command:

passwd string

SSH permits up to 100 characters for a username and up to 50 characters for the password.

To enable authentication using a AAA server, enter the following command:

aaa authenticate ssh console server_tag

Replace server_tag with the identifier for the AAA server.

Note The firewall might ignore requests from SSH clients for certain advanced features, including X11

forwarding, Authentication Agent forwarding, port forwarding, and compression.

Connecting to the PIX Firewall with an SSH Client

To gain access to the PIX Firewall console using SSH, at the SSH client, enter the username pix and

enter the Telnet password.

When starting an SSH session, a dot (.) displays on the PIX Firewall console before the SSH user

authentication prompt appears, as follows:

pixfirewall(config)# .

The display of the dot does not affect the functionality of SSH. The dot appears at the console when

generating a server key or decrypting a message using private keys during SSH key exchange before user

authentication occurs. These tasks can take up to two minutes or longer. The dot is a progress indicator

that verifies that the PIX

Firewall is busy.

Viewing SSH Status

To view the status of SSH sessions, enter the following command:

show ssh [sessions [ip_address]]

The show ssh sessions command provides the following display:

Session ID Client IP Version Encryption State Username

0 172.16.25.15 1.5 3DES 4 -

1 172.16.38.112 1.5 DES 6 pix

2 172.16.25.11 1.5 3DES 4 -

The Session ID is a unique number that identifies an SSH session. The Client IP is the IP address of the

system running an SSH client. The Version lists the protocol version number that the SSH client

supports. The Encryption column lists the type of encryption the SSH client is using. The State column

1 2 ... 321 322 323 324 325 326 327 328 329 330 331 ... 465 466

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 326