ASA 5520 Firewall SSH configuration

ASA 5520 Firewall ssh Configuration

Friends who are accustomed to telnet may wish to try SSh login methods to transmit ciphertext in the network to ensure network security.

The configuration is as follows:

The first step is to create a key.

ASA(config)# crypto key generate rsa

INFO: The name for the keys will be:

Keypair generation process begin. Please wait...

Second, allow ssh to log in from the outside interface

ASA(config)# ssh 0.0.0.0 0.0.0.0 outside

Step 3: Login password

By default, the username is pix and the password is passwd, which can be modified via ASA(config)# passwd ***

Step 4 (additional), enable local aaa for ssh

ASA(config)# aaa authentication enable console LOCAL //Note: LOCAL should be capitalized manually, do not first lowercase "l" and then press tab, that will report an error. One letter tormented me for days!

Set up a local account

ASA(config)# username jiajia password jiajia

Set up a local account

ASA(config)# username gouzhongxing password aqkfkhnuiwu

//Related commands

show ssh //See SSH configuration information

show crypto key mypubkey rsa //View the generated rsa key value

crypto key zero ize//clear all generated keys

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

//configure server side

ASA(config)# crypto key generate rsa modulus 1024 //Specifies the size of the rsa coefficient, the larger the value, the longer the rsa generation time,cisco Recommended use 1024.

ASA(config)# write memory //save the key just generated

ASA(config)# ssh 0.0.0.0 0.0.0.0 outside //0.0.0.0 0.0.0 means that any external host can access the outside interface through SSH, of course, you can specify a specific host or network to access,outside can also be changed to inside means that the firewall is accessed through SSH

ASA(config)# ssh timeout 10 //Set timeout in minutes

ASA(config)# ssh version 1 //Specify SSH version, optionally version 2