Re: ssh on pix 506e - login name

from Cisco docs

Configuring Local SSH (No AAA Authentication)

It is also possible to set up an SSH connection to the PIX with local
authentication and no AAA server; however, there is no discrete
per-user username. The username is always "pix."

Use the following commands to configure local SSH on the PIX:

hostname goss-d3-pix515b
domain-name rtp.cisco.com
ca gen rsa key 1024
!--- Caution: The RSA key will not be saved without
!--- the ca save all command.
!--- The write mem command will not save it!
!--- In addition, if the PIX has undergone a write erase
!--- or has been replaced, then cutting and pasting
!--- the old configuration does not generate the key.
!--- You must re-enter the ca gen rsa key command.
!--- If there is a secondary PIX in a failover pair, doing write
standby
!--- will not copy the key from the primary to the secondary.
!--- You must also generate and save the key on the secondary device.
ssh 172.18.124.114 255.255.255.255 inside
ssh timeout 60
passwd cisco123

.

Relevant Pages

  • Re: Cisco PIX with SSH enabled on external port for maintenance
    ... I took the original poster as wanting to enable SSH to the PIX itself ... - PIX SSH does not support public key authentication. ... VPN fixes this by ...
    (Security-Basics)
  • Re: Cisco PIX with SSH enabled on external port for maintenance
    ... As far as the PIX goes I would try to avoid leaving the management ... I personally favor connecting to the PIX ... If you must support SSH to the "outside" interface then you should ... >> external side of my Cisco PIX firewall. ...
    (Security-Basics)
  • Re: Cisco PIX with SSH enabled on external port for maintenance
    ... network through the PIX for administration on his network. ... You can still filter with the PIX. ... Your points about the PIX SSH are noted by me, ... VPN fixes this by ...
    (Security-Basics)
  • Cisco PIX (NO VPN) and IAS
    ... I would like to enable AAA on our Cisco Pix 520 and use our IAS server to ... authentication for 2 other devices (a modem pool and a Nortel Contivity ... I set up IAS for the PIX client and configured the PIX to use RADIUS for SSH ...
    (microsoft.public.internet.radius)
  • Re: SSH connection not valid until PDM launched
    ... > I cannot connect to my PIX box via SSH. ... It seems that presentation of the certificate via trying to start ... > the PDM causes SSH to be able to connect. ...
    (comp.dcom.sys.cisco)