Monthly Archive for August, 2006

Enabling Remote Management on a Cisco PIX

The following commands with enable the SSH server on a Cisco PIX. Note that the last command can be used multiple times in order to allow access from different networks. Alternatively, you can use “0.0.0.0 0.0.0.0″ to allow access from anywhere. Also note that when you connect to the PIX via SSH, the default username is “pix.”

ca zeroize rsa
ca generate rsa key 1024
ca save all
ssh <network> <mask> <interface>

The telnet server is enabled like this:

telnet <network> <mask> <interface>

And for you cheaters out there, the web interface is enabled like this:

http server enable
http 0.0.0.0 0.0.0.0 inside

Configuring the DHCP Server on a Cisco PIX

I much prefer to use a more full-featured and robust DHCP server (such as ISC DHCP) but the PIX’s built-in DHCP server works well enough for small networks.

dhcpd address 192.168.180.100-192.168.180.200 inside
dhcpd dns 192.168.180.2
dhcpd enable inside

Note that the PIX’s inside IP address must be on the same subnet as the addresses in the DHCP range.