Enabling SSH on Cisco PIX 6.3

Enabling SSH on PIX 6.3 is relatively easy.

Clear all RSA keys. Remove any existing keys from the database with the command:

ca zeroize rsa

Assign a host name. This is tied to the RSA key. If you change the hostname after generating the RSA keys, you will receive an error message.

hostname CISCOTALK-AUS-PIX

Generate the RSA key. Generate a new key and specify the key length:

ca generate rsa key 512

Save the RSA key. This step is important. If you don’t save the key, the key is lost after a reboot.:

ca save all

Enable SSH. Specify which subnets on which interface you want to allow SSH access.

ssh 8.8.8.0 255.255.255.0 outside