Cisco ASA 5505 Configuration Manual page 674

Configuring Device Access for ASDM, Telnet, or SSH
Restrictions
•
•
The adaptive security appliance supports the SSH remote shell functionality provided in SSH Versions
1 and 2 and supports DES and 3DES ciphers.
XML management over SSL and SSH is not supported.
Note
Detailed Steps
Choose the Configuration > Device Management > Management Access >
Step 1
ASDM/HTTPS/Telnet/SSH pane, click Add.
The Add Device Access Configuration dialog box appears in the right-hand pane.
Choose the type of session from the three options listed: ASDM/HTTPS, Telnet, or SSH.
Step 2
From the Interface Name drop-down list, choose the interface to use for administrative access.
Step 3
In the IP Address field, add the IP address of the network or host that is allowed access. The field allows
Step 4
IPv6 addresses.
Note
From the Mask drop-down list, choose the mask associated with the network or host that is allowed
Step 5
access.
For ASDM/HTTPS sessions, verify that the Enable HTTP Server check box is checked. This is the
Step 6
default setting.
Step 7 Specify the port number. The default port is 443.
Adjust the Idle Timeout or Session Timeout if necessary. There is no timeout value by default. This
Step 8
setting is available only in single, routed mode.
Step 9 For Telnet sessions, the default timeout value is 5 minutes. To change this value, type a new one in the
Telnet Timeout field.
Step 10 For SSH sessions, the default timeout value is 5 minutes. To change this value, type a new one in the
SSH Timeout field.
Click Apply.
Step 11
The changes are saved to the running configuration.
Cisco ASA 5500 Series Configuration Guide using ASDM
32-2
You cannot use Telnet to the lowest security interface unless you use Telnet inside an IPSec tunnel.
The adaptive security appliance allows :
A maximum of 5 concurrent Telnet connections per context, if available, with a maximum of
–
100 connections divided between all contexts.
A maximum of 5 concurrent SSH connections per context, if available, with a maximum of 100
–
connections divided between all contexts.
A maximum of 5 concurrent ASDM instances per context, if available, with a maximum of 32
–
ASDM instances between all contexts.
When you enter a colon (:) in the IP Address field for an IPv6 address, the Netmask field changes
to Prefix Length.
Chapter 32 Configuring Management Access
OL-20339-01