topic ASA Management port with different route in Network Security

ASA Management port with different route

Machi Ma — Tue, 12 Mar 2019 02:53:07 GMT

Hi,

I have some ASA 5510 in under setup now. I got some problem and I would like to connect the Management0/0 to Interenet but it will not same is subnet of "outside" interface. What should I do. Following is my part of interface setup:

-------------------------------

interface Ethernet0/0

nameif outside

security-level 0

ip address 222.53.77.234 255.255.255.252

interface Management0/0

nameif management

security-level 100

ip address 202.177.223.1 255.255.255.0

management-only

route outside 0.0.0.0 0.0.0.0 222.53.77.233 1

aaa authentication ssh console LOCAL

----------------------------------

I am able to connect with ethernet0/0 interface. But however, it did not able to connecting with Management0/0. How should I setup to be allow?

Thanks!

ASA Management port with different route

Julio Carvajal — Thu, 17 Oct 2013 13:42:03 GMT

Hello,

U should plugging a laptop to managment 0/0 and then from that laptop connect to 202.177.223.1.

that interface has the management-access only so no routed traffic can reach that.

Regards,

Jcarvaja

ASA Management port with different route

narawat — Fri, 18 Oct 2013 02:51:55 GMT

Hi Machi,

Please let me know if i understand your problem correctly:

you want to connect a machine to management interface and want to access internet from there.

For this you would need to make the management interface to be able to use as a data interface by "no management-only" and it you are using Private IP addressing in management interface than you need to add a dynamic NAT for the traffic else we dont need to NAT the traffic.

Please explain the issue with the help of a topology diagram if above is not the case.

Cheers,

Naveen

ASA Management port with different route

Machi Ma — Fri, 18 Oct 2013 09:40:00 GMT

Hello,

Thanks for advise. However, the Managment interface I will plan to connect to the "back door" which can allow to access from outside directly. ie. The outside interface will connecting to primary Internet and management interface will connecting to another ISP which work as a "back door".

Please let me know if still not clear about my idea and I can share more for you.

Thanks!