[c-nsp] asa config

[Christopher J. Wargaski]

Hi Deric--

   To SSH to the outside interface of the ASA, you need to permit SSH by IP
address.

   The configuration statement "ssh 1.2.3.4 255.255.255.255 outside"
permits SSH to the IP address on the outside interface of the ASA from the
IP address 1.2.3.4.

   Also, make sure that you have created the crypto key for the outside
interface.


cjw


> Date: Mon, 12 Dec 2011 15:17:15 -0500
> From: Deric Kwok <deric.kwok2000 at gmail.com>
> To: Cisco Network Service Providers <cisco-nsp at puck.nether.net>
> Subject: [c-nsp] asa config
> Message-ID:
>        <CAAiP321c4n1xS+6V+njFQbOQcTD5_k6w9xFzhm9ZTqVosKziUA at mail.gmail.com
> >
> Content-Type: text/plain; charset=ISO-8859-1
>
> Hi all
>
> I have two questions to config ASA and would like you to help.
>
> 1/ I open the ssh outside access
>
> ssh 66.77.49.2x 255.255.255.255 outside
>
> but the ASA is showing error as
>
> routing failed to locate next hop for tcp from outside:66.49.4.x/22 to
> outside" 66.77.49.2x
>
> 2/ I try to create nat in outside interface and get this error
> Do we need another public ip to have nat?
>
> ASA(config)# global (outside) 1 66.49.4.x
> Error: 66.49.4.x-66.49.4.x overlaps with outside interface address
>
> Thank you
>
>
>