topic Re: ASAv Management-Only setting in Network Security

ASAv Management-Only setting

dkmz — Tue, 02 Jun 2020 22:49:18 GMT

I'm trying to deploy ASAv in Azure and as the docs suggest, the management-only setting should be removed from the Management interface since "...the Management interface is the only interface that can have an Azure public IP address associated with it. Because of this, the ASAv in Azure allows though-data traffic on the Management interface."

However, when I'm trying to configure the ASAv in ASDM, the checkbox for "Dedicate this interface to management only" (under Interface Settings->Interfaces) keeps reverting to checked, every time I uncheck it and click Apply. I need to configure AnyConnect VPN on the Management Interface and the only way the wizard allows that interface as a VPN option in the dropdown box is if the above mentioned checkbox is unchecked.

If this is some type of bug, another option that might work is if there was an easy way to route incoming VPN requests on the Management interface to one of the other interfaces where I can enable VPN but I'm new to this and haven't gotten that far yet.

Re: ASAv Management-Only setting

Sheraz.Salim — Tue, 02 Jun 2020 23:13:10 GMT

what is the ASA code you running and what is the ASDM version you on? curious if you have a CLI accesses. you can manually give it the commands.

interface man0/0
nameif mgmt
security-level 0
ip address x.x.x.x x.x.x.x
no managment-only
!

Re: ASAv Management-Only setting

dkmz — Tue, 02 Jun 2020 23:25:55 GMT

ASDM Version 7.14(1)

ASA Version 9.14(1)

Privilege Level 15

I've tried the following commands in an SSH session but the ASDM doesn't seem to recognize the changes (or reverts them back before I can tell):

enable
conf t
interface management 0/0
no management-only

Re: ASAv Management-Only setting

Sheraz.Salim — Tue, 02 Jun 2020 23:31:54 GMT

once you apply the changes from the CLI/SSH do refresh the ASDM. it will show you the new changes.

Re: ASAv Management-Only setting

dkmz — Tue, 02 Jun 2020 23:35:38 GMT

I renamed to mgmt and set security level back to 0 and it picked those changes up, but still not the management-only, where the box remains checked

Re: ASAv Management-Only setting

seckka21 — Wed, 24 Aug 2022 22:44:06 GMT

Hello

I have the same issue.I would like to uncheck the managemen box.

Cordially