Hello,
I am trying to connect to the console interface of my ASA 5505. Unfortunately I don't have a single computer with serial port. Thus, I would like to use Telnet or SSH. My preference is SSH, but I can't seem to get either working.
I've enabled telnet and ssh access on the inside interface, using IP 192.168.1.0, mask 255.255.255.0.
Attempting to connect via telnet results in a password prompt. However, I can't seem to figure out what this password is - even after a full factory reset. It's not stated in the docs, nor can I find any info on the internet. I've tried using <blank> and the exec password - once when the exec was blank, and another time after explicitly setting the exec password.
Does anyone know what the default telnet password is??
When I attempt to connect via ssh, the ASA disconnects me before I am even prompted for credentials. The error message I receive is: ssh_exchange_identificatio
What do I need to do in order to get the ASA to authenticate my ssh session?
Many thanks,
Fred
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Essentially Telnet is the same - but that will ONLY work from the inside - and you dont need to generate a key
the default password is cisco (unless you changed it with a passwd command
ciscoasa(config)#telnet 192.168.1.0 255.255.255.0 inside
is all you need
heres some bedtime reading on my website http://www.petenetlive.com
Business Accounts
Answer for Membership
by: PeteLongPosted on 2008-04-06 at 13:40:51ID: 21293079
OK Im assuming you are trying to access the asa from the inside?
SSH will not work till you generate a key
Allow SSH to PIX / ASA
First allow an IP address (Or network)
eg
ciscoasa(config)#ssh 217.22.146.123 255.255.255.255 outside
or
ciscoasa(config)#ssh 217.22.146.0 255.255.255.0 outside
or
ciscoasa(config)#ssh 192.168.1.1 255.255.255.255 inside
or
ciscoasa(config)#ssh 192.168.1.0 255.255.255.0 inside
Then (Only do this once) Create an RSA key on the Firewall
ciscoasa(config)# crypto key generate rsa
INFO: The name for the keys will be: <Default-RSA-Key>
Keypair generation process begin. Please wait...
Ciscoasa(config)#
Load an SSH Client on your PC e.g. PuTTy http://www.putty.nl/
Under "HostName (or IP Address) enter the Firewalls details
Tick SSH
Select Open
Note: You can give the connection and Save it for use again.
The first time is connects it will give you a warning about
trusting the other end accept it.
The username is pix
The Password is the Firewalls telent password
Note: The telnet password is set to cisco by default change it
using the passwd command
ciscoasa(config)#passwd newpassword.
Note if there is a problem with the keys, they might have corrupted. To repair
PIX7 / ASA (v7)
crypto key zeroize rsa
crypto key generate rsa modulus 1024