Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 487)

100

101

30-3

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 30 Managing System Access

Allowing SSH Access

The security appliance accepts SSH connections from all interfaces, including the one with the lowest

security level.

Step 4 (Optional) To set the duration for how long an SSH session can be idle before the security appliance

disconnects the session, enter the following command:

hostname(config)# ssh timeout

minutes

Set the timeout from 1 to 60 minutes. The default is 5 minutes. The default duration is too short in most

cases and should be increased until all pre-production testing and troubleshooting has been completed.

For example, to generate RSA keys and let a host on the inside interface with an address of 192.168.1.2

access the security appliance, enter the following command:

hostname(config)# crypto key generate rsa modulus

1024

hostname(config)# write mem

hostname(config)# ssh 192.168.1.2 255.255.255.255 inside

hostname(config)# ssh timeout 30

To allow all users on the 192.168.3.0 network to access the security appliance on the inside interface,

the following command:

hostname(config)# ssh 192.168.3.0 255.255.255.0 inside

By default SSH allows both version one and version two. To specify the version number enter the

following command:

hostname(config)# ssh version

version_number

The version_number can be 1 or 2.

Using an SSH Client

To gain access to the security appliance console using SSH, at the SSH client enter the username pix and

enter the login password set by the password command (see the “Changing the Login Password” section

on page 30-3).

When starting an SSH session, a dot (.) displays on the security appliance console before the SSH user

authentication prompt appears, as follows:

hostname(config)# .

The display of the dot does not affect the functionality of SSH. The dot appears at the console when

generating a server key or decrypting a message using private keys during SSH key exchange before user

authentication occurs. These tasks can take up to two minutes or longer. The dot is a progress indicator

that verifies that the security appliance is busy and has not hung.

Changing the Login Password

The login password is used for Telnet and SSH connections. By default, the login password is “cisco.”

To change the password, enter the following command:

hostname(config)# {passwd | password}

password

You can enter passwd or password. The password is a case-sensitive password of up to 16 alphanumeric

and special characters. You can use any character in the password except a question mark or a space.

1 2 ... 482 483 484 485 486 487 488 489 490 491 492 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 487

Kommentare zu diesen Handbüchern