According to this documentation it should be possible to enable an SSH connection to a Cisco ASA 5505. However, it is not possible to ping an IP from the ASA while this has been configured. As it is impossible to ping internally then SSH from another system will work neither.

ciscoasa# sh run
interface Vlan 100
  nameif inside
  security-level 100
  ip address

Ping from ASA

ciscoasa# ping
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:
No route to host

Success rate is 0 percent (0/1)
  • 1
    Are you able to post a full sanitized config? There are many areas that are relevant to ICMP traffic on the ASA. Aug 15, 2014 at 21:36
  • 2
    Has the vlan 100 interface got a status of up? If the interface is not up it wont ping...
    – GerryEgan
    Aug 15, 2014 at 23:21

1 Answer 1


The ability to SSH to the firewall and ping outbound are usually two unrelated events and configuration. Since you're unable to ping the firewall's own from itself, the interface appears down.

After ensuring vlan 100 is up/up, you'll need both a crypto key for SSH and a statement like ssh inside to permit all inside hosts on that subnet to SSH into the firewall. Also check your SSH supported versions so client and server (firewall) are compatbile.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.