Pix501 an SSH

[micgla]

I am helping a client setup a Pix501.
The only thing I really need to do for the client is setup the pix so that the webhosting company can connect via SSH and configure the rest.
Can anyone tell me what I have to do to setup SSH on the Pix. Can I have more than 1 SSH rule on their PIX501? In other words, can I have a rule to allow 2 different IP's to connect via SSH? They wouldn't be connected at the same time.

 

[yizhar]

HI.

Can anyone tell me what I have to do to setup SSH on the Pix?
First you need to configure basic ip addressing - at the minimum you should be able to ping from the pix to router.
Then you add SSH support.

You can use pixcript (from my site), PDM, or the following commands for SSH:
conf t
hostname AAAA
domain BBBB
ca zero rsa
ca generate rsa key 1024
ca save all
ssh IP-OF-SSH-CLIENT 255.255.255.255 outside
write mem

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[yizhar]

And at the client side - use DES (unless you have 3DES on the pix), and SSH version 1.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[micgla]

Thanks Yizhar,

I configured basic IP addressing and tried pinging the router. Then I added the commands you gave me and everything works great,and the webhosting company connected fine. Life is good. Thanks so much.

Oh,
I downloaded your pixcript and will try using it in a lab setting once I get back. Thanks for the help Yizhar

Mike