• Crypto Key Generate Rsa Modulus 1024 Asa 2
• Crypto Key Generate Rsa Modulus 1024 Asa Code
• Crypto Key Generate Rsa Modulus 1024 Asa 2016

Oct 02, 2015 (Optional) Specifies that the RSA key pair can be exported to another Cisco device, such as a router. Modulus modulus-size (Optional) Specifies the IP size of the key modulus.By default, the modulus of a certification authority (CA) key is 1024 bits. The recommended modulus for a CA key is 2048 bits. %ASA-5-111008: User 'enable15' executed the 'crypto key generate rsa general-keys modulus 1024 noconfirm' command. なお、' ssh 0 0 inside ' というコマンドは、' inside ' のインターフェースアドレスに対する SSH 接続を許可したいサブネットを指定するものとなります。.

KB ID 0001322

Problem

I’ve lost count of the number of times this has happened to me! Most of my colleagues prefer to use the ASDM for remote management, but if (like me) you work at command line, then sometimes people <ahem> forget to generate the RSA keypair when deploying a firewall. Then even if SSH access and AAA is setup correctly, you still can’t get in via SSH. Instead you see the following;

RoyalTS and RoyalTSX: ssh_exchange_identification: Connection closed by remote host.

PuTTY: PuTTY Fatal Error: Server unexpectedly closed network connection.

Crypto Key Generate Rsa Modulus 1024 Asa 2

SecureCRT: Connection closed.

OSX/Linux: ssh_exchange_identification: Connection closed by remote host.

Now at command line you can fix this with a ‘Crypto Key Generate RSA Modulus 2048‘ command, but you can’t get to command line only ASDM.

Solution

On older versions of the ASDM you could generate the keypair in the Identification Certificates section (well you still can but only if you are also generating a certificate request file). So, as we are command line warriors, lets use the ASDM’s command line!