topic Re: is this flow impossible? in Network Security

is this flow impossible?

JunSungKim2765 — Fri, 12 Jul 2024 10:51:04 GMT

I want to connect to M1/1 through inside2 and inside.

how can i make it?

thank you

best regards

Re: is this flow impossible?

MHM Cisco World — Fri, 12 Jul 2024 11:39:18 GMT

Why you not interconnect both L3 device instead of this?

MHM

Re: is this flow impossible?

Kasun Bandara — Fri, 12 Jul 2024 11:52:17 GMT

@JunSungKim2765 can you elaborate more about your requirement? what is the use case. if you are looking to manage ASA via ASDM, you can set 'management interface' settings. and is your inside and management in same subnet or different subnets?

Re: is this flow impossible?

JunSungKim2765 — Fri, 12 Jul 2024 12:03:35 GMT

thank you for a reply.

We need a security policy when the traffic goes to inside from insdie2.

best regards

Re: is this flow impossible?

MHM Cisco World — Fri, 12 Jul 2024 12:07:03 GMT

L3 is router or SW

MHM

Re: is this flow impossible?

JunSungKim2765 — Fri, 12 Jul 2024 12:11:21 GMT

thank you for a reply.

inside, management, and inside2 are in different subnet.

If i do telnet to M1/1, the traffic drops.
Because ASA forwards inside2 traffics to MGMT interface directly.
even though I set for a example, 'route inside 192.168.1.0/24(MGMT) 10.10.10.2.

best regards

Re: is this flow impossible?

MHM Cisco World — Fri, 12 Jul 2024 12:20:48 GMT

Config inside 1 OR inside 2 as managment-access

MHM

Re: is this flow impossible?

JunSungKim2765 — Fri, 12 Jul 2024 12:35:23 GMT

thank you for a reply.

it works. but I don't know why.

I'm reading about management-access feature.

best regards