topic Cisco ASA Management Interface in Network Security

Cisco ASA Management Interface

aspry — Fri, 21 Feb 2020 15:34:23 GMT

I would be grateful if somebody could point me in the right direction.

On our ASA 5510 the management interface is set up as management only (Subnet 172.24.100.0/24).

The above subnet is also used as management access to our other firewalls.

We would like to be able to access the other firewalls on the 172.24.100.0 network remotely whilst connected via anyconnect.

Thanks

Andy

Re: Cisco ASA Management Interface

Bogdan Nita — Wed, 28 Mar 2018 09:07:47 GMT

Hi Andy,

Interfaces configured with management-only will allow only management traffic to the box, so you will not be able to pass traffic to other firewalls.

You could either disable the management-only (which I do not think you can on the 5510 Management/0 interface) or use another interface as default gateway for the management network.

HTH

Bogdan

Re: Cisco ASA Management Interface

Dennis Mink — Wed, 28 Mar 2018 11:28:43 GMT

This is not good pratise. add a management server with 2 NIC's on in your lan and one in your management subnet.

Re: Cisco ASA Management Interface

Dennis Mink — Wed, 28 Mar 2018 11:45:13 GMT

This is not good pratise. add a management server with 2 NIC's on in your lan and one in your management subnet.