Chapter 23 Configuring Management Access; Allowing Telnet Access - Cisco 7604 Configuration Manual

Configuring Management Access
This chapter describes how to access the FWSM for system management through Telnet, SSH, HTTPS,
and VPN. It also describes how to authenticate and authorize users.
This chapter includes the following sections:
•
•
•
•
•
•
To access the FWSM interface for management access, you do not also need an access list allowing the
Note
host IP address. You only need to configure management access according to the sections in this chapter.

Allowing Telnet Access

The FWSM allows Telnet connections to the FWSM for management purposes. You cannot use Telnet
to the lowest security interface unless you use Telnet inside an IPSec tunnel.
The FWSM allows a maximum of 5 concurrent Telnet connections per context, if available, with a
maximum of 100 connections divided between all contexts. You can control the number of Telnet
sessions allowed per context using resource classes. (See the
page
Please note that if you have two or more concurrent Telnet or SSH sessions and one of the sessions is at
Note
the More prompt, the other sessions may hang until the More prompt is dismissed. To disable the More
prompt and avoid this situation, enter the pager lines 0 command.
Please note that concurrent access to the FWSM is not recommended. In some cases, two Telnet sessions
issuing the same commands might cause one of the sessions to hang until a key is depressed on the other
session.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Allowing Telnet Access, page 23-1
Allowing SSH Access, page 23-2
Allowing HTTPS Access for ASDM, page 23-4
Allowing a VPN Management Connection, page 23-4
Allowing ICMP to and from the FWSM, page 23-9
AAA for System Administrators, page 23-10
4-24.) In admin context only, you can have up to 15 Telnet and 15 SSH sessions concurrently.
23
C H A P T E R
"Configuring a Class" section on
23-1