[c-nsp] ASA ssh difficulties

Justin Krejci jkrejci at usinternet.com
Tue Jul 14 10:17:40 EDT 2009


If you provide your aaa configuration we might be able to assist like the
output from these commands (assuming you have console access)

show run aaa
show run aaa-server

I am not very familiar with ASDM so I don't know where the aaa config lives
in ASDM but certainly you'll want to look around in that part.

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Jonathan Brashear
Sent: Tuesday, July 14, 2009 9:06 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] ASA ssh difficulties

I'm a bit stumped on an issue I'm having with a particular 5505.  Originally
it was inaccessible via ASDM or SSH, but after a reboot it began to allow
access via ASDM.  However, SSH is still not working.  I've verified that the
username/pass is correct(it works through the ASDM) and that SSH access is
allowed from the relevant IP range(I get to a password prompt), but it
refuses to accept known good passwords from multiple accounts.  It thinks
the password is bad, but only when done via SSH.  I haven't run into this
issue with other ASAs that are configured identically and I can login to the
other ASAs from the same terminal window so it shouldn't be something to do
with my terminal emulation.  Any thoughts on why this may be happening?

Network Engineer, JNCIS-M
> 214-981-1954 (office) 
> 214-642-4075 (cell)
> jbrashear at hq.speakeasy.net 
http://www.speakeasy.net
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list