Hi Deric-- To SSH to the outside interface of the ASA, you need to permit SSH by IP address.
The configuration statement "ssh 1.2.3.4 255.255.255.255 outside" permits SSH to the IP address on the outside interface of the ASA from the IP address 1.2.3.4. Also, make sure that you have created the crypto key for the outside interface. cjw > Date: Mon, 12 Dec 2011 15:17:15 -0500 > From: Deric Kwok <[email protected]> > To: Cisco Network Service Providers <[email protected]> > Subject: [c-nsp] asa config > Message-ID: > <caaip321c4n1xs+6v+njfqboqctd5_k6w9xfzhm9ztqvoskz...@mail.gmail.com > > > Content-Type: text/plain; charset=ISO-8859-1 > > Hi all > > I have two questions to config ASA and would like you to help. > > 1/ I open the ssh outside access > > ssh 66.77.49.2x 255.255.255.255 outside > > but the ASA is showing error as > > routing failed to locate next hop for tcp from outside:66.49.4.x/22 to > outside" 66.77.49.2x > > 2/ I try to create nat in outside interface and get this error > Do we need another public ip to have nat? > > ASA(config)# global (outside) 1 66.49.4.x > Error: 66.49.4.x-66.49.4.x overlaps with outside interface address > > Thank you > > > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
