If your are on 6.X u can use ssh from anywhere in the world. There is a doc on cco on how to enable ssh..
Cheers, Kevin >From: "Mark W. Odette II" >Reply-To: "Mark W. Odette II" >To: [EMAIL PROTECTED] >Subject: RE: How to manage the pix 501 remotely via telnet or pdm [7:52831] >Date: Fri, 6 Sep 2002 22:25:06 GMT > >HUH!?!?! What does ICMP have to do with Telnet or the PDM?? > >Mindiani- To answer your question, yes there is an alleged way of doing >what you're wanting to do. I have not done it myself yet, but there is >an example on CCO of how to do such a configuration. > >Pad Pad Pad http://www.cisco.com/warp/public/110/pdm_vpntun.html > >For Telnet, as far as I know, there isn't a way to telnet to the PIX >from the outside- it's considered a security risk by the firewall group >at Cisco, so they don't allow for it. > >If you want to telnet to the PIX, create a rule on the PIX that allows >your specific Internet Host to connect to a telnet device such as a >Switch or a Unix box (or even the Telnet Server on Win2K if I dare >suggest it), and then hit the PIX from that telnet host. Be sure and >configure the PIX with the "telnet 'inside-host-ip' 255.255.255.255 >inside" command. > >Good luck, and let us know how you do! > >Mark > >-----Original Message----- >From: Dain Deutschman [mailto:[EMAIL PROTECTED]] >Sent: Friday, September 06, 2002 4:28 PM >To: [EMAIL PROTECTED] >Subject: Re: How to manage the pix 501 remotely via telnet or pdm >[7:52826] > >do you have the conduit configured to allow icmp? I think the PIX blocks >icmp unless you specifically open a conduit for it. >Dain >""mindiani mindiani"" wrote in message >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi I just installed two PIX 501 with vpn tunnel over the internet for >my > > client and I would like to allow telnet and pdm from one site to the > > other. The tunnels are up and I able to send traffic in both >directions > > but I cannot telnet into the remote Pix from my PC.I tried the >following > > command: telnet 172.16.1.2 255.255.255.255 outside This command >would > > not allow my PC (IP address172.16.1.2) to telnet to the remote site >but I > > am able to telnet to my servers behind the PIX. i have the same >problem > > with PDM. > > > > >------------------------------------------------------------------------ > > > > Join the worlds largest e-mail service with MSN Hotmail. Click Here _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=52868&t=52868 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
