topic Yes thanks Vibhor. I was in Network Security

ASDM Interface

Matt Wilson — Tue, 12 Mar 2019 04:57:03 GMT

My setup is :PIX 515E, IOS 8.0(4)28, ASDM 6.1(5)57, Firewall mode routed, 6 interfaces, 128Mb.

My question is, can ASDM be accessed through any interface on the PIX besides ethernet1? I'd prefer to run ASDM through ethernet5 but it refuses to run. I have tried deconfiguring eth1 and copying its config to eth5 to no avail. The basic setup on eth1 that works is:

interface Ethernet1
nameif Management
security-level 100
ip address 100.100.100.18 255.255.255.0

This doesn't work on eth5.

Matt.

Hi,Would you be able to reply

Vibhor Amrodia — Fri, 17 Oct 2014 10:27:31 GMT

Hi,

Would you be able to reply with these outputs from the PIX:-

1) show asp table socket

2) show run interface eth5

Also , is the IP from which you are trying to access the ASDM in the same Network as the range configured on the Interface ?

Thanks and Regards,

Vibhor Amrodia

The responses are as follows

Matt Wilson — Sun, 19 Oct 2014 03:46:41 GMT

The responses are as follows:

PIX515E# show asp table socket

Protocol Socket Local Address Foreign Address State
TCP 0002082c 100.100.100.18:23 0.0.0.0:* LISTEN
SSL 0002e9ec 100.100.100.18:443 0.0.0.0:* LISTEN
SSL 0008993c 100.100.100.18:443 Miffy:1063 ESTAB
PIX515E# show run interface eth5
!
interface Ethernet5
description MGT_INTERFACE
speed 100
duplex full
nameif Management
security-level 0
ip address 100.100.100.18 255.255.255.0

I figured it out. I was allowing telnet/http access to the inside interface, not the management interface. Inside is Eth1, Management is Eth5.

A force of habit. As this PIX has 6 Eth interfaces I thought I'd dedicate one to management. Now to interface between my 877 & 1751-V!

Thanks for your help Vibhor.

Hi,So , were you able to

Vibhor Amrodia — Tue, 21 Oct 2014 10:03:20 GMT

Hi,

So , were you able to resolve this issue ?

Thanks and Regards,

Vibhor Amrodia

Yes thanks Vibhor. I was

Matt Wilson — Tue, 21 Oct 2014 19:47:35 GMT

Yes thanks Vibhor. I was reminded of a valuable lesson, it's all in the logic. The answer, as usual, was staring me in the face. ASDM can be accessed from any interface. In the process I also figured out that you can't telnet into these PIX. One must set up SSH2 to do this.