Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand

Source: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118075-configure-asa-00.pdf

Code Block
themeMidnight
linenumberstrue
hostname <cus-initials>-r0
domain-name <preferred domain name>
username <user> password <password> privilege 15
aaa authentication ssh console LOCAL
crypto key generate rsa general-keys modulus 2048
ssh <single host or network> <subnet mask> <name if>
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 60 

dns domain-lookup outside
dns name-server 8.8.8.8 4.2.2.2


Config connect to legacy SSH devices. 

Expand

~/.ssh/config

Code Block
Host *
        KexAlgorithms +diffie-hellman-group1-sha1

/etc/ssh/ssh_config

Code Block
Host *
Protocol 2,1
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc
SendEnv LANG LC_*
HashKnownHosts yes
GSSAPIAuthentication yes