[c-nsp] asa config

Christopher J. Wargaski wargo1 at gmail.com
Mon Dec 12 23:35:47 EST 2011

Hi Deric--

   To SSH to the outside interface of the ASA, you need to permit SSH by IP

   The configuration statement "ssh outside"
permits SSH to the IP address on the outside interface of the ASA from the
IP address

   Also, make sure that you have created the crypto key for the outside


> Date: Mon, 12 Dec 2011 15:17:15 -0500
> From: Deric Kwok <deric.kwok2000 at gmail.com>
> To: Cisco Network Service Providers <cisco-nsp at puck.nether.net>
> Subject: [c-nsp] asa config
> Message-ID:
>        <CAAiP321c4n1xS+6V+njFQbOQcTD5_k6w9xFzhm9ZTqVosKziUA at mail.gmail.com
> >
> Content-Type: text/plain; charset=ISO-8859-1
> Hi all
> I have two questions to config ASA and would like you to help.
> 1/ I open the ssh outside access
> ssh outside
> but the ASA is showing error as
> routing failed to locate next hop for tcp from outside:66.49.4.x/22 to
> outside"
> 2/ I try to create nat in outside interface and get this error
> Do we need another public ip to have nat?
> ASA(config)# global (outside) 1 66.49.4.x
> Error: 66.49.4.x-66.49.4.x overlaps with outside interface address
> Thank you

More information about the cisco-nsp mailing list