Cisco Systems ssh on pix 506e - login name

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
ssh on pix 506e - login name Matt Williamson 03-21-06
Posted by Matt Williamson on March 21, 2006, 4:00 pm
Please log in for more thread options
I'm setting up my pix to use ssh with putty as the client. I've enabled ssh
on the pix for a range of IP's on the inside. The connection works but it
prompts me with a "Login as:" prompt and nothing I've tried works. Normally,
I just telnet to it and it asks for the password but no login. How do I
determine what login I need to use or configure it to use a specific one?

TIA

Matt



Posted by ekn on March 21, 2006, 4:21 pm
Please log in for more thread options
The username is pix and it will only accept ssh 1.
kinda goofy but better then nothing,
-ekn


Posted by Merv on March 21, 2006, 4:23 pm
Please log in for more thread options
from Cisco docs

Configuring Local SSH (No AAA Authentication)

It is also possible to set up an SSH connection to the PIX with local
authentication and no AAA server; however, there is no discrete
per-user username. The username is always "pix."

Use the following commands to configure local SSH on the PIX:

hostname goss-d3-pix515b
domain-name rtp.cisco.com
ca gen rsa key 1024
!--- Caution: The RSA key will not be saved without
!--- the ca save all command.
!--- The write mem command will not save it!
!--- In addition, if the PIX has undergone a write erase
!--- or has been replaced, then cutting and pasting
!--- the old configuration does not generate the key.
!--- You must re-enter the ca gen rsa key command.
!--- If there is a secondary PIX in a failover pair, doing write
standby
!--- will not copy the key from the primary to the secondary.
!--- You must also generate and save the key on the secondary device.
ssh 172.18.124.114 255.255.255.255 inside
ssh timeout 60
passwd cisco123


Posted by chris on March 21, 2006, 5:07 pm
Please log in for more thread options

> from Cisco docs
>
> Configuring Local SSH (No AAA Authentication)
>
> It is also possible to set up an SSH connection to the PIX with local
> authentication and no AAA server; however, there is no discrete
> per-user username. The username is always "pix."

I always set up local AAA and use a "username/password" for SSH so each
administrator has their own username.

Chris.



Posted by chris on March 21, 2006, 5:11 pm
Please log in for more thread options

> I'm setting up my pix to use ssh with putty as the client. I've enabled
> ssh on the pix for a range of IP's on the inside. The connection works but
> it prompts me with a "Login as:" prompt and nothing I've tried works.
> Normally, I just telnet to it and it asks for the password but no login.
> How do I determine what login I need to use or configure it to use a
> specific one?
>
> TIA
>
> Matt
>
You can set up local accounts on the pix to have a username/password combo
and not use the default "pix" username.

aaa-server LOCAL protocol local
aaa authentication enable console LOCAL
aaa authentication ssh console LOCAL
username bob password jiggypuff privilege 15

Chris.




Similar ThreadsPosted
ssh on pix 506e - login name March 21, 2006, 4:00 pm
Help needed to allow SSH login from outside to PIX August 30, 2005, 5:49 am
Login and PPP..can I do both on one IAS server? October 10, 2005, 1:00 pm
Re: login and password August 29, 2006, 10:40 pm
Re: login and password August 30, 2006, 12:59 am
No login windows July 9, 2005, 1:54 am
login and password August 29, 2006, 9:58 pm
PIX 501's, and login December 20, 2006, 1:33 pm
I want to login to my 2507 April 30, 2007, 9:22 pm
SSH login problem December 3, 2007, 5:04 pm
PIX backdoor login January 9, 2008, 3:49 am
maybe OT: RSA ACE/Server - SecurID login from NAS September 5, 2005, 11:10 am
SAP R/3 login problem through tunnel February 22, 2006, 11:19 am
DHCP/Login Issue May 17, 2006, 2:30 pm
any one with cisco login need this file July 2, 2006, 9:39 am