Access SSH - WAN ==> LAN with redirect port

[Math78]

Hello,

I want to access my switch in SSH, from the Wan to my Lan. I created a port forwarding rule like these :

The SSH connection works in my LAN on the Ip address 192.168.1.3.

My Appliance is a Cisco MERAKI MX67 and my switch a Cisco CBS350

I use the Ip address from my ISP set without filtering on the MX.

Someone can help me ?

Thanks in advance,

Regards

[alemabrahao]

Do you have any ACL configured on your switch?

[Math78]

At the moment no ACL on my switch.

Only 3 vlan, Vlan 1 native (Data) 192.168.1.0/24, Vlan 20 (Voice) 192.168.20.0/24 and Vlan 40 (Wifi) 192.168.40.0/24

[KarstenI]

First, do a packet capture on the WAN to see if the session reaches the MX. Second, think about using a VPN for this task.

[Math78]

Hello,

The session reaches the MX:

A VPN connection is required?

[KarstenI]

A VPN is not required, but will make it more secure.

Here it looks like no answer is coming back from the switch.

Can you ping the switch from the MX and does the Switch have a default-gateway pointing to the MX?

[Math78]

Yes I can ping the switch from the MX. 

The switch does have a gateway that points to the MX (192.168.1.254)

[KarstenI]

Then it is likely something in the Switch-config that it doesn't answer the SSH request from outside. Best to replace the switch with a Meraki switch. Then you are still in the right community ... 🙂

As a switch problem, the Cisco Community is likely the right place to ask. But likely no one will be upset if you show your CBS config for troubleshooting wile your Meraki Switch is not delivered. 🙂

[Math78]

I can't show you the switch configuration at the moment, I'm not on the infrastructure site. Next week I will make a "running-config" copy of the CBS switch

[alemabrahao]

Have tried creating an access profile?

[Math78]

I do not have remote access to the CBS interface, I will check this next week point, thank you very much for the help. I will keep you informed