Route inside traffic out management interface

christians1 — Tue, 12 Mar 2019 07:27:47 GMT

Hello,

I have a need to temporarily route inside traffic out a management0/0 interface on a Cisco ASA. ASA5525 Version 9.1(6)10.

Basically there is a network off the management interface that inside users need to get to.

So if I do a "route management 10.10.10.0 255.255.255.0 10.95.95.10"

Will the traffic from inside interface be able to travers out the management0/0 interface to the 10.10.10.0/24 network?

I do have this enabled = same-security-traffic permit inter-interface

If I can do this. Then, can I nat inside traffic out the management0/0 interface? And if so, what nat commands would i be able to use to source nat to the management interface?

Thanks!

You will also need to issue

Marius Gunnerud — Thu, 10 Mar 2016 05:32:06 GMT

You will also need to issue the command "no management-only" to allow the management port to forward data traffic.

Also, keep in mind that once you apply an ACL to the interface then security levels are no longer in effect (until you remove the ACL again). So if you do have ACLs configured on the inside interface then make sure to allow this traffic there.

Please remember to select a correct answer and rate helpful posts

topic Route inside traffic out management interface in Network Security

Route inside traffic out management interface

You will also need to issue