How to Allow Telnet to the PIX

Use the Telnet remote command line interface service for the Cisco PIX security appliance configuration and administration if clear text remote command-line access is allowed by network policy. After Telnet is enabled, you must also apply settings to allow Telnet access, which is usually blocked on PIX appliances. Use the Cisco command line interface through serial console connection and configure policies to allow Telnet connections.

Things You'll Need

• Cisco serial console cable
• Windows computer with a serial port and HyperTerminal installed
• Password for the Cisco PIX appliance serial console
• Enable password on the Cisco PIX appliance

Instructions

1. Plug the 9-pin connector on one end of the Cisco serial console cable into the serial port on the Windows computer. Connect the 8-pin RJ45 connector at the other end of the Cisco serial console cable into the serial port on the Cisco PIX appliance.

2. Open HyperTerminal on the Windows computer and click "Cancel" if prompted by the "Connection Description" box. Click the "File" menu item, then click "Properties" in the menu that appears. Click the "Connect Using" drop-down box and select the name of the COM port that will be used by the serial cable (usually "COM1" or "COM2") from the list of options.

3. Click the "Configure" button. Click the "Bits per second" box and click "9600." Click the "Data bits" box and click "8" in the list that appears. Click the "Parity" box and click "None." Click the "Stop bits" box and click "1." Click the "Flow Control" box and click "Hardware." Click the "OK" button.

4. Click the "Call" menu item near the top of the "HyperTerminal" window and then click "Call" in the menu that appears. Tap the "Enter" key until the Cisco command prompt appears in the window.

5. Type in the Cisco PIX console terminal password if prompted and tap the "Enter" key. Type "enable" at the command prompt and press the "Enter" key. Input the Enable password at the command line if prompted to do so and press the "Enter" key.

6. Type "configuration term" at the command prompt and tap the "Enter" key. Type "telnet 0.0.0.0 0.0.0.0 inside" and press the "Enter" key. Type "end" on the command line and press "Enter."

7. Type "copy run start" at the command line and press the "Enter" key.

References

• Cisco: PIX/ASA 7.x: SSH/Telnet on the Inside and Outside Interface Configuration Example
• Tech Republic: Taking Your First Steps With a Cisco Router