Xin chào ! Nếu đây là lần đầu tiên bạn đến với diễn đàn, xin vui lòng danh ra một phút bấm vào đây để đăng kí và tham gia thảo luận cùng VnPro.

Announcement

Collapse
No announcement yet.

[HELP FIREWALL CISCO ASA] Không kết nối được firewall cisco qua SSH

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • [HELP FIREWALL CISCO ASA] Không kết nối được firewall cisco qua SSH

    Mọi người giúp em với ạ.
    Em cấu hình SSH trên firewall cisco ASA trên thiết bị thật nhưng không connect được, mặc dù telnet vẫn bình thường.

    ASA Version 8.6(1)2
    !
    hostname ASA-LAB
    enable password 2KFQnbNIdI.2KYOU encrypted
    passwd 2KFQnbNIdI.2KYOU encrypted
    names
    !
    interface GigabitEthernet0/0
    nameif INSIDE
    security-level 100
    ip address 192.168.0.254 255.255.255.0
    !
    interface GigabitEthernet0/1
    shutdown
    no nameif
    no security-level
    no ip address
    !
    interface GigabitEthernet0/2
    shutdown
    no nameif
    no security-level
    no ip address
    !
    interface GigabitEthernet0/3
    shutdown
    no nameif
    no security-level
    no ip address
    !
    interface GigabitEthernet0/4
    shutdown
    no nameif
    no security-level
    no ip address
    !
    interface GigabitEthernet0/5
    shutdown
    no nameif
    no security-level
    no ip address
    !
    interface Management0/0
    shutdown
    no nameif
    no security-level
    no ip address
    management-only
    !
    ftp mode passive
    pager lines 24
    mtu INSIDE 1500
    no failover
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-66114.bin
    no asdm history enable
    arp timeout 14400
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    user-identity default-domain LOCAL
    aaa authentication telnet console LOCAL
    aaa authentication ssh console LOCAL
    aaa authentication http console LOCAL
    http server enable
    http 192.168.0.0 255.255.255.0 INSIDE
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
    telnet 192.168.0.0 255.255.255.0 INSIDE
    telnet timeout 5
    ssh 192.168.0.0 255.255.255.0 INSIDE
    ssh timeout 5
    ssh version 2
    console timeout 0
    threat-detection basic-threat
    threat-detection statistics access-list
    no threat-detection statistics tcp-intercept
    webvpn
    username admin_vulq password f3UhLvUj1QsXsuK7 encrypted
    !
    !
    prompt hostname context
    call-home reporting anonymous prompt 1
    call-home
    profile CiscoTAC-1
    no active
    destination address http https://tools.cisco.com/its/service/...es/DDCEService
    destination address email callhome@cisco.com
    destination transport-method http
    subscribe-to-alert-group diagnostic
    subscribe-to-alert-group environment
    subscribe-to-alert-group inventory periodic monthly 21
    subscribe-to-alert-group configuration periodic monthly 21
    subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:0233a7949ab0bd3860e87ab624219d11
    : end

  • #2
    khó hiểu quá. ai giải thích mình hiểu cái này là gì ko

    Comment

    Working...
    X